CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2026-62542

CVE-2026-62542 affects Oracle E-Business Suite, Oracle Advanced Benefits (Self Service Benefits) with vulnerable versions 12.2.3–12.2.15. The vulnerability allows a network-based, low-privilege attacker over HTTP to read, update/insert/delete data and cause partial denial of service in Oracle Adv...

CVE-2026-62546

...

CVE-2026-62530

Technical details about CVE-2026-62530 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62528

CVE-2026-62528 affects Oracle E-Business Suite’s Oracle HCM Configuration Workbench (Install) with affected versions 12.2.3–12.2.15. A low-privilege, unauthenticated/ network-accessible attacker (via HTTP) can exploit this vulnerability to achieve unauthorized update/insert/delete access and read...

CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...

CVE-2026-62521

...

CVE-2026-62525

CVE-2026-62525 describes a vulnerability in the Oracle Quality component of Oracle E-Business Suite (Quality Workbench HTML system). Affected are supported Oracle E-Business Suite 12.2.3–12.2.15. The issue can be exploited by a low-privilege, unauthenticated attacker over HTTP to perform unauthor...

CVE-2026-62519

CVE-2026-62519 affects Oracle E-Business Suite’s Succession Planning (Succession plan) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Succession planning component, potentially enabling unauthorized update/i...

CVE-2026-62518

...

CVE-2026-62515

...

CVE-2026-62515

CVE-2026-62515 affects Oracle E-Business Suite’s Oracle Advanced Planning Command Center (Internal Operations) with affected versions 12.2.3–12.2.15. The CVSS 3.1 base score is 7.6 (Confidentiality and Integrity impacts). The vulnerability is exploitable over HTTP with network access by a high-pr...

CVE-2026-62513

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Regulatory Management product (Internal Operations). Affected are 12.2.3–12.2.15. The flaw can be exploited by a low-privilege attacker with network access via HTTP to gain unauthorized access to data or perfor...

CVE-2026-62508

CVE-2026-62508 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The flaw can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracle Time and Labor. The CVSS 3.1 base score is 3.1...

CVE-2026-62504

...

CVE-2026-62498

...

CVE-2026-62494

The CVE-2026-62494 entry affects Oracle Time and Labor in Oracle E-Business Suite, specifically the Internal Operations component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized creatio...

CVE-2026-62495

...

CVE-2026-62495

CVE-2026-62495 concerns Oracle E-Business Suite (Process Manufacturing → Process Execution) vulnerable in 12.2.15. The flaw allegedly enables a low-privileged, network-accessing attacker (via HTTP) to take over the Oracle Process Manufacturing Process Execution, with impact on confidentiality, in...

CVE-2026-62490

...