PT-2026-78021

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Endeca Application Controller. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2026-77749

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An issue in the Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human...

PT-2026-77895

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows a low privileged attacker with access to the infrastructure where the software executes to compromi...

PT-2026-77908

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows an unauthenticated attacker with access to the infrastructure where the software executes to compromise the system. This ca...

PT-2026-77988

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2026-77565

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion...

PT-2026-78140

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.0 Description A flaw in the Imperative Web Server component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to...

PT-2026-78161

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.0 Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized rea...

PT-2026-77507

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description An unauthenticated attacker with network access via HTTP can compromise the system. This issue requires human interaction from a person other than the attacker to be...

PT-2026-77534

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Cloud Manager versions 22.3 through 26.6 Description A flaw in the Siebel Cloud Manager component allows a low privileged attacker with network access via HTTP to compromise the application. Successful exploitation can...

PT-2026-77865

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description An issue exists in the Access and security component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

PT-2026-77969

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description An issue exists in the Content Acquisition System component. An unauthenticated attacker with network access via HTTP can compromise the system,...

PT-2026-78125

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.14 Description A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to an unauthorized hang or a...

PT-2026-77338

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description An issue in the Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized...

PT-2026-77493

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Runtime Tools component of Oracle WebCenter Portal allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2026-77347

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony versions 19.8 through 19.8.5 Oracle Hospitality Simphony versions 19.9 through 19.9.3 Oracle Hospitality Simphony versions 19.10 through 19.10.1 Description An unauthenticated attacker with network access via HTTP c...

PT-2026-77667

Name of the Vulnerable Software and Affected Versions Oracle Reports Developer version 14.1.2.0.0 Description An issue exists in the Security and Authentication component of Oracle Reports Developer. An unauthenticated attacker with network access via SOAP can compromise the system, potentially...

PT-2026-78094

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition Analytics Server version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition Analytics Server version 26.01.0.0.0 Description An unauthenticated attacker with network access via HTTP can...

PT-2026-78087

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.32 Oracle Database Server versions 21.3 through 21.23 Oracle Database Server versions 23.4.0 through 23.26.3 Description A flaw in the RDBMS component allows an unauthenticated attacker with...

PT-2026-77991

Name of the Vulnerable Software and Affected Versions Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 Description A flaw in the Experience Manager component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful...