CVE-2026-60828: Improper Access Control

Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Interacti...

CVE-2026-60816: Improper Access Control

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks o...

CVE-2026-60681: Improper Access Control

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-63158

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payables versions 12.2.8 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Payables allows a low privileged attacker with network access via HTTP to compromise the system. Successf...

CVE-2026-60843: Improper Access Control

Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63135

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...

PT-2026-63156

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: EDI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of...

CVE-2026-60832: Improper Access Control

Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via RMI to compromise Oracle...

CVE-2026-62567: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...

CVE-2026-60322: Missing Authentication for Critical Function

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Oracle Diagnostics Interfaces. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-62563: Improper Authorization

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process...

CVE-2026-60770: Improper Access Control

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Objec...

CVE-2026-60710: Improper Access Control

Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway...

CVE-2026-62470: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Manager Self-Service. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-63192

Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public...

CVE-2026-47033: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

PT-2026-62928

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Product Development versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

PT-2026-62853

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2026-62785

Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle TeleSales. Successful...

PT-2026-63210

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Time and Labor versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Time and Labor product. A low privileged attacker with network access via HTTP can...