CVE-2026-60965

CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...

CVE-2026-60959

...

CVE-2026-60962

...

CVE-2026-60960

CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...

CVE-2026-60957

...

CVE-2026-60950

...

CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-60942

The CVE-2026-60942 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine) in versions 12.2.3–12.2.15. It enables a low-privileged, network-authenticated attacker (HTTP) to potentially create/modify/delete critical data or access all data via the Fulfillment Mana...

CVE-2026-60939

The CVE-2026-60939 entry concerns Oracle E-Business Suite’s Oracle Project Contracts (Internal Operations). Affects versions 12.2.3–12.2.15; a low-privileged user with network access via HTTP can access unauthorized data read from Oracle Project Contracts. CVSS 3.1 base score is 3.1 (Confidential...

CVE-2026-60940

CVE-2026-60940 affects Oracle E-Business Suite, Oracle Service Contracts (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a high-privileged attacker with network access via HTTP and requires user interaction. Impact: unauthorized creation, deletion,...

CVE-2026-60936

The CVE-2026-60936 entry concerns Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected releases 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who can access over HTTP, potentially causing partial denial of service to Oracle Labor...

CVE-2026-60938

...

CVE-2026-60937

CVE-2026-60937 affects Oracle E-Business Suite Labor Distribution, Internal Operations component. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletions on Oracle Lab...

CVE-2026-60932

CVE-2026-60932 affects Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privilege, network-accessing attacker over HTTP to compromise Oracle Labor Distribution, potentially leading to takeover and impa...

CVE-2026-60931

...

CVE-2026-60929

Oracle E-Business Suite Public Sector Financials (Internal Operations) versions 12.2.3–12.2.15 are affected by CVE-2026-60929. The vulnerability allows a low-privilege, unauthenticated or network-accessible attacker over HTTP to modify accessible data (update/insert/delete) in Oracle Public Secto...

CVE-2026-60924

...

CVE-2026-60925

CVE-2026-60925 affects Oracle E-Business Suite, Oracle Public Sector Payroll (Internal Operations) versions 12.2.4–12.2.15. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise the Oracle Public Sector Payroll component, potentially taking over the payrol...

CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60920

...