These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A critical vulnerability was identified in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. The vulnerability affects versions 12.2.1.4.0 and 14.1.1.0.0. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to a takeover of WebLogic Server. The CVSS 3.1 Base Score is 10.0, indicating a high impact on Confid [truncated]
A critical vulnerability was identified in Oracle WebLogic Server, a product of Oracle Fusion Middleware, specifically in the Core component. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of WebLogic Server. This vulnerability is easily exploitable by unauthenticated attackers with network access via TCP, potentially leading to a complete takeover of the WebLogic Se [truncated]
A vulnerability was discovered in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. The affected versions are 12.2.1.4.0 and 14.1.1.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebLogic Server, potentially leading to a takeover of the server. The vulnerability has a high CVSS score of 8.8, indicating signi [truncated]
A critical vulnerability was identified in Oracle Fusion Middleware's WebLogic Server, specifically in the Core component. The vulnerability affects WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows high privileged attackers with network access via HTTP to compromise WebLogic Server, potentially impacting additional products. Successful attacks can result in a complete [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability is easily exploitable and allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can result in a takeover of the site. This vulnerability has a high impact on confidentiality, integrity, and availability.
A high-severity vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35295, has a CVSS score of 7.5 and can be exploited by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of Oracle WebCenter Sites. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Sites [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35293, has a CVSS score of 9.8 and allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can result in a takeover of the site. The vulnerability is located in the WebCenter Sites component and has a [truncated]
A critical vulnerability was discovered in Oracle WebLogic Server's Console component. This vulnerability, tracked as CVE-2026-35292, allows unauthenticated attackers with network access via HTTP to compromise WebLogic Server. The vulnerability has a CVSS 3.1 Base Score of 10.0, indicating high impacts on confidentiality, integrity, and availability. Successful attacks can result in the takeover of WebLog [truncated]
A vulnerability was discovered in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. The affected versions are 14.1.2.0.0 and 15.1.1.0.0. This difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to compromise WebLogic Server, potentially leading to a takeover of the server. The CVSS score is 6.6, indicating a medium [truncated]
A high-severity vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. The vulnerability allows high-privileged attackers with logon access to compromise the system, potentially impacting additional products. The vulnerability has a CVSS 3.1 Base Score of 8.2, indicating high confidentiality, integrity, and availability impacts. The CVSS Vector is CVSS:3.1/ [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high impact on confidentiality, integri [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 and has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability is easily exploitable by a low-privileged attacker with network access via T3, IIOP, and successfu [truncated]
A critical vulnerability was identified in Oracle WebCenter Enterprise Capture, a product within Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by a low-privileged attacker with network access via T3 or IIOP, potentially leading to a complete takeover of the Oracle WebCenter Enterprise Capture. The vulnerability has a CVSS 3.1 Base Score of [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by a low-privileged attacker with network access via T3 or IIOP, potentially leading to a complete takeover of the Oracle WebCenter Enterprise Capture. The CVSS 3.1 Base Score is 9.9, indicating a high [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 and has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability is easily exploitable by a low-privileged attacker with network access via T3, IIOP, and successfu [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 and has been rated with a CVSS score of 9.9, indicating a high severity level. The vulnerability is easily exploitable by a low-privileged attacker with network access via T3, IIOP, potentially leading to a takeover of Oracle We [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-35280, has a CVSS 3.1 Base Score of 9.9, indicating a high severity level. It affects versions 12.2.1.4.0 and 14.1.2.0.0 of the product. The vulnerability is easily exploitable by a low-privileged attacker with network access via T3, IIOP, potentiall [truncated]
A vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, potentially leading to a takeover. The vulnerability is located in the Performance Monitor component and has a CVSS 3.1 Base Score of 8.1, indicatin [truncated]
A critical vulnerability was found in PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft, specifically in the Performance Monitor component. The vulnerability affects versions 8.61 and 8.62, allowing unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, potentially leading to a takeover. This vulnerability has a CVSS 3.1 Base Score of 9.8 [truncated]
A vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. This difficult-to-exploit vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, potentially leading to a takeover. The vulnerability has a CVSS 3.1 Base Score of 8.1, indicating high confidentiality, integrity, and availability [truncated]
A high-severity vulnerability was discovered in Oracle VM VirtualBox 7.2.8, affecting the Shared Folders component. This vulnerability, CVE-2026-35275, has a CVSS score of 7.5 and allows low-privileged attackers with logon access to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. The vulnerability is difficult to exploit and requires [truncated]
A vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools, potentially leading to unauthorized access to critical data or complete access to all PeopleSoft Enterprise PT PeopleTools accessible data, as well as unauthorized upd [truncated]
A vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft, specifically in the Deployment Package component. Versions 8.61 and 8.62 are affected. This vulnerability allows an unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PT PeopleTools executes to compromise the system. Successful attacks can result in takeover of PeopleSoft [truncated]
A high-severity vulnerability was discovered in PeopleSoft Enterprise PT PeopleTools, affecting versions 8.61 and 8.62. This vulnerability, tracked as CVE-2026-35271, has a CVSS 3.1 Base Score of 8.7, indicating a high level of risk. The vulnerability is difficult to exploit and allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. Successful a [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows high privileged attackers with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks can result in takeover of Oracle WebCenter Content. The vulnerability has a CVSS 3.1 Base Score of 9.1, indicating [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's Identity Manager product, specifically in the REST WebServices component. The vulnerability, tracked as CVE-2026-35269, has a CVSS score of 7.5 and allows unauthenticated attackers with network access via HTTP to compromise Identity Manager, potentially leading to unauthorized creation, deletion, or modification of critical data. O [truncated]
A critical vulnerability was discovered in Oracle Fusion Middleware's Identity Manager product, tracked as CVE-2026-35268. The vulnerability has a CVSS score of 9.9 and allows a low-privileged attacker with network access to compromise the Identity Manager. The vulnerability is located in the Core component of Identity Manager and can be exploited via T3 and IIOP protocols. Successful attacks can lead to [truncated]
A high-severity vulnerability was found in Oracle Fusion Middleware's Identity Manager product, specifically in the REST WebServices component. The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of Identity Manager. This vulnerability, CVE-2026-35267, has a CVSS 3.1 Base Score of 8.8, indicating high confidentiality, integri [truncated]
A high-severity vulnerability was discovered in Oracle Fusion Middleware's Identity Manager product. The vulnerability, tracked as CVE-2026-35265, has a CVSS score of 8.8 and allows a low-privileged attacker with network access via HTTP to compromise Identity Manager, potentially leading to a takeover. The vulnerability is located in the Security component of Identity Manager. Organizations using Oracle F [truncated]
This debrief provides an analysis of CVE-2026-35273, a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools. The vulnerability has a CVSS score of 9.8 and is categorized as a Missing Authentication for Critical Function Vulnerability. It is known to be exploited in the wild and requires immediate attention from defenders responsible for PeopleSoft Enterprise PeopleTools deployments. The vuln [truncated]
