261774 matches found
CVE-2026-60864
...
CVE-2026-60864
CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...
CVE-2026-60862
...
CVE-2026-60863
CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...
CVE-2026-60855
CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...
CVE-2026-60847
CVE-2026-60847 describes a vulnerability in Oracle E-Business Suite, Oracle Order Entry (Internal Operations) affecting 12.2.3–12.2.15. An attacker with high privileges and local logon could compromise Order Entry, potentially enabling unauthorized update/insert/delete of accessible data and part...
CVE-2026-60843
CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...
CVE-2026-60844
...
CVE-2026-60840
The vulnerability CVE-2026-60840 affects Oracle Demand Signal Repository (ODEC) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged attacker with network access via SQL to compromise the repository, potentially leading to unauthorized creation,...
CVE-2026-60837
CVE-2026-60837 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) in 12.2.3–12.2.15. A low-privilege user with local logon can compromise Oracle Price Protection, with potential unauthorized creation/deletion/modification of critical data and broader access to Oracle P...
CVE-2026-60833
Vulnerability CVE-2026-60833 affects Oracle Solaris 11.4 (Utility component). A low-privilege, local attacker with logon can exploit the flaw to compromise Oracle Solaris, potentially leading to system takeover. CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availability). Techn...
CVE-2026-60835
CVE-2026-60835 affects Oracle E-Business Suite Price Protection (Internal Operations) in versions 12.2.3–12.2.15. The flaw allows a low-privileged attacker over HTTP with network access to compromise Oracle Price Protection, risking unauthorized access to sensitive data. Affected product: Oracle ...
CVE-2026-60828
...
CVE-2026-60827
CVE-2026-60827 affects Oracle iSupport (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport; successful attacks require user interaction and can lead to unauthoriz...
CVE-2026-60824
CVE-2026-60824 affects Oracle E-Business Suite’s Oracle iSupport (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged, network-adjacent attacker with HTTP access to compromise iSupport, with potential unauthorized access to all Oracle iSupport...
CVE-2026-60817
CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...
CVE-2026-60816
...
CVE-2026-60812
CVE-2026-60812 affects Oracle E-Business Suite’s Supply Chain Trading Connector (Collaboration History), with affected versions 12.2.3–12.2.15. The vulnerability is network-exploitable via HTTP by a low-privileged user and can lead to unauthorized access to data; CVSS v3.1 base score 6.5 (Confide...