CVE-2026-60825: Improper Access Control

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successfu...

CVE-2026-60750: Improper Access Control

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. While the...

CVE-2026-60740: Improper Access Control

Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Management...

CVE-2026-60738: Improper Access Control

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-60736: Improper Access Control

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: Definition. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business...

CVE-2026-60734: Improper Access Control

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

CVE-2026-60340: Improper Privilege Management

Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-60344: Improper Access Control

Vulnerability in the Oracle HRMS France product of Oracle E-Business Suite component: French HR Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS France. Successf...

CVE-2026-60339: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

CVE-2026-60337: Improper Access Control

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60321: Improper Access Control

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-60310: Improper Access Control

Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite component: Appraisals. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance...

PT-2026-62730

Name of the Vulnerable Software and Affected Versions Oracle Interaction Blending versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Interaction Blending product within Oracle E-Business Suite. A low privileged attacker with access to th...

CVE-2026-60930: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Publ...

CVE-2026-61080: Improper Access Control

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62925

Name of the Vulnerable Software and Affected Versions Oracle iRecruitment versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iRecruitment product of Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can...

CVE-2026-60855: Improper Privilege Management

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

PT-2026-63198

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

CVE-2026-60875: Improper Access Control

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2026-61336: Improper Privilege Management

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...