CVE-2026-60908

...

CVE-2026-60908

CVE-2026-60908 concerns Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially lead to unauthorized access to critica...

CVE-2026-60904

The CVE-2026-60904 entry applies to Oracle E-Business Suite, Oracle Installed Base product, component Create Item Instance. Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable over the network via HTTP by a low-privileged attacker, potentially leading to unauthorized creati...

CVE-2026-60897

...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...

CVE-2026-60898

...

CVE-2026-60893

...

CVE-2026-60893

The CVE-2026-60893 entry affects Oracle E-Business Suite, Oracle Payroll (Internal Operations) for versions 12.2.3–12.2.15. The issue is a local, low-privilege vulnerability that can allow compromise of Oracle Payroll; broader impact on related products is possible. CVSS v3.1 base score is 6.5 (C...

CVE-2026-60890

...

CVE-2026-60892

...

CVE-2026-60886

...

CVE-2026-60870

...

CVE-2026-60871

...

CVE-2026-60871

CVE-2026-60871 affects Oracle E-Business Suite Risk Management (Internal Operations) for versions 12.2.3–12.2.15. A low-privilege, network-accessible attacker via HTTP can compromise Oracle Risk Management, potentially enabling unauthorized create/delete/modify access to data or complete access t...

CVE-2026-60868

...

CVE-2026-60864

...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60862

...

CVE-2026-60863

CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...

CVE-2026-60855

CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...