CVE-2026-61329

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price...

CVE-2026-60161

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-64880

CVE-2026-64880 corresponds to a blind SQL injection in Tenable Security Center, caused by unsanitized user input in report filtering parameters that is concatenated into SQL queries. This can enable unauthorized database read access. The CVE is listed with a base score of 7.1 (HIGH) on CVSS v3.1/...

PT-2026-62630

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Asset Management versions 12.2.3 through 12.2.15 Description An issue in the Work Definition component allows a low privileged attacker with network access via HTTPS to compromise the system. This can lead to unauthorized rea...

PT-2026-62878

Name of the Vulnerable Software and Affected Versions Oracle Project Contracts versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in...

PT-2026-62616

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Content Manager versions 12.2.3 through 12.2.15 Description A flaw in the Cover Letter component of the Oracle Content Manager allows a low privileged attacker with network access via HTTP to compromise the syste...

PT-2026-63054

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This iss...

PT-2026-62935

Name of the Vulnerable Software and Affected Versions Oracle Production Scheduling versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system...

PT-2026-62824

Name of the Vulnerable Software and Affected Versions Oracle Project Contracts versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Project Contracts product within Oracle E-Business Suite. A low privileged attacker with network access via...

PT-2026-63027

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payroll allows a low privileged attacker with network access via HTTP to compromise the system. This issue...

PT-2026-63035

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62858

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Property Manager versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Property Manager allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-63092

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Payroll versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Payroll product allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-62567

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...

PT-2026-62499

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the...

PT-2026-62766

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw in the Graph / Charting component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

PT-2026-63011

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite component: Supply to Order Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63201

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Time and Labor versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitati...

PT-2026-62438

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS France versions 12.2.3 through 12.2.15 Description A flaw in the French HR Payroll component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-62519

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description A flaw in the Content Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise...