PT-2026-77558

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-77802

Name of the Vulnerable Software and Affected Versions Oracle Call Center Technology versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...

PT-2026-78000

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-78083

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the BI Platform...

PT-2026-77194

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 4.0.0 through 5.4.7 Joomla! Core versions 6.0.0 through 6.1.2 Description Improper Access Control List ACL checks in custom fields webservice endpoints allow unauthorized users to create fields for components they should...

PT-2026-77800

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Project Planning and Control versions 12.2.3 through 12.2.15 Description An issue exists in the Change Management component of the Oracle Project Planning and Control product. A low privileged attacker with netwo...

PT-2026-77502

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.4 Description An issue exists in the Business Logic Infra SEC component that allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2026-77503

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.4 Description A security flaw in the E1 IOT Orchestrator Security component allows a low privileged attacker with network access via HTTP to compromise the system. Th...

PT-2026-77818

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financi...

PT-2026-78012

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

PT-2026-78024

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Endeca Application Controller component allows a low-privileged attacker with access to the infrastructure where the software executes ...

PT-2026-77762

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

PT-2026-77745

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Hyperion Financial Reporting Server. This issue requires human interaction from a person...

PT-2026-77786

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77727

Name of the Vulnerable Software and Affected Versions Oracle Autonomous Health Framework component: Trace File Analyzer versions 26-26.1.0 Oracle Autonomous Health Framework component: Trace File Analyzer version 26.2.0 Oracle Autonomous Health Framework component: Trace File Analyzer version...

PT-2026-78225

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP/2 to compromise the system. This can lead to a complete Denial of Service...

PT-2026-77804

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Scripting product allows a low privileged attacker with network access via HTTP to compromise the...

PT-2026-78200

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

PT-2026-77403

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.20 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorize...

PT-2026-77839

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Loans versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...