CVE-2026-61329

The CVE-2026-61329 entry affects Oracle E-Business Suite, specifically the Price Protection product (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker and can lead to unauthorized creation, deletio...

CVE-2026-61325

The CVE-2026-61325 entry concerns Oracle E-Business Suite, Oracle Advanced Benefits (component: Internal Operations), affected in version 12.2.15. The vulnerability enables a high-privileged attacker who can reach Oracle Advanced Benefits over the network via HTTP to compromise data and potential...

CVE-2026-61323

...

CVE-2026-61322

Summary (CVE-2026-61322) : Vulnerability in the TeleSales component (Internal Operations) of Oracle E-Business Suite . Affected products/versions: 12.2.3–12.2.15 . An attacker with low privileges, over the network, via HTTP, can exploit this to take over TeleSales, according to the NVD entry summ...

CVE-2026-61323

...

CVE-2026-61315

...

CVE-2026-61311

...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61310

CVE-2026-61310 affects Oracle E-Business Suite’s Oracle Product Hub (component: Internal Operations) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, potentially creating, deleting or modifying data or gaining un...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61301

...

CVE-2026-61294

CVE-2026-61294 affects Oracle E-Business Suite: Oracle Common Applications Calendar, Calendar Synchronizations. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially update, insert, or delete data, read a subset of data, and cause a part...

CVE-2026-61287

Oracle E-Business Suite Process Manufacturing Systems (Internal Operations) is affected in 12.2.3–12.2.15. A low-privilege, unauthenticated attacker could leverage HTTP access to modify or delete data and access data unauthorizedly, with no availability impact, per CVSS 3.1 base score 8.1. The CV...

CVE-2026-61292

CVE-2026-61292 affects Oracle U.S. Federal Financials in Oracle E-Business Suite (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker who can reach the system over HTTP to obtain unauthorized read access to a subset of Oracle U.S. Federal ...

CVE-2026-61285

CVE-2026-61285 affects Oracle E-Business Suite, Oracle Process Manufacturing Systems (OPMS) Internal Operations, with affected versions 12.2.11–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise OPMS and potentially take over the system. The CVS...

CVE-2026-61278

...

CVE-2026-61277

...

CVE-2026-61262

...

CVE-2026-61260

...

CVE-2026-61260

CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...