CVE-2026-60913

Vulnerability CVE-2026-60913 affects Oracle E-Business Suite, Oracle Property Manager (Internal Operations) in versions 12.2.3–12.2.15. A high-privileged attacker with local access can compromise the Property Manager and gain unauthorized read access to a subset of its data. CVSSv3.1 base score i...

CVE-2026-60910

...

CVE-2026-60904

...

CVE-2026-60872

...

CVE-2026-60875

...

CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60838

...

CVE-2026-60840

...

CVE-2026-60813

CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...

CVE-2026-60811

CVE-2026-60811 affects Oracle E-Business Suite’s Oracle Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to perform unauthorized updates/insertions/deletions and to read ...

CVE-2026-60790

...

CVE-2026-60788

...

CVE-2026-60770

...

CVE-2026-60760

...

CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60723

...

CVE-2026-60697

...

CVE-2026-60681

...

CVE-2026-60678

...

CVE-2026-60673

The CVE-2026-60673 entry concerns Oracle BI Publisher (Oracle Analytics) with affected XML Services. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, leading to unauthorized access to Oracle...