PT-2026-34121

Name of the Vulnerable Software and Affected Versions Oracle HCM Common Architecture versions 12.2.3 through 12.2.15 Description An issue in the Knowledge Integration component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle HCM Comm...

CVE-2024-21083

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Script Engine. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher...

CVE-2022-21543

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Updates Environment Mgmt. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

The vulnerability of the OIM component – LDAP users and role synchronization of the Oracle Identity Manager’s identification system – allows attackers to expose protected information.

The vulnerability of the OIM component – LDAP user and role synchronization of the Oracle Identity Manager – is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using the HTTP protocol...