CVE-2026-61107

CVE-2026-61107 describes a vulnerability in Oracle Applications DBA (Oracle E-Business Suite Internal Operations) affecting 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access over HTTP to compromise Oracle Applications DBA, potentially leading to take over...

CVE-2026-61105

The CVE-2026-61105 entry describes a vulnerability in Oracle Banking Trade Finance (Infrastructure) affecting Oracle Financial Services Applications, versions 14.6.0–14.8.0. The flaw enables a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation/modification/deleti...

CVE-2026-61101

...

CVE-2026-61101

CVE-2026-61101 affects Oracle MES for Process Manufacturing (Internal Operations) within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows unauthenticated network access via HTTP and requires user interaction, with potential for unauthorized read and write of Oracle MES d...

CVE-2026-61099

The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...

CVE-2026-61097

...

CVE-2026-61097

CVE-2026-61097 describes a vulnerability in Oracle Financial Services Applications, specifically the Oracle Banking Trade Finance Process Management product (component: Common). Affected are versions 14.6.0 through 14.8.0. The flaw enables an unauthenticated attacker with network access via HTTP ...

CVE-2026-61093

...

CVE-2026-61092

...

CVE-2026-61091

CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...

CVE-2026-61086

...

CVE-2026-61086

CVE-2026-61086 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM Order Management product (component: Security) in version 9.2. The vulnerability is exploitable by an unauthenticated attacker over HTTPS with network access, allowing access to or disclosure of data within the S...

CVE-2026-61089

The CVE-2026-61089 entry concerns Oracle PeopleSoft Enterprise SCM Inventory (component: Security) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise SCM Inventory, potentially yielding unauthorized data access and the ability to update/inser...

CVE-2026-61088

CVE-2026-61088 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) version 9.2. Exposed vulnerability allows an unauthenticated attacker on the network (via HTTP) to compromise SCM Manufacturing, potentially leading to unauthorized access to critical data or full access t...

CVE-2026-61088

...

CVE-2026-61083

...

CVE-2026-61083

...

CVE-2026-61082

...

CVE-2026-61078

...

CVE-2026-61078

CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...