CVE-2026-60904

The CVE-2026-60904 entry applies to Oracle E-Business Suite, Oracle Installed Base product, component Create Item Instance. Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable over the network via HTTP by a low-privileged attacker, potentially leading to unauthorized creati...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60894

...

CVE-2026-60859

...

CVE-2026-60846

...

CVE-2026-60834

CVE-2026-60834 affects Oracle Solaris 11.4 (Utility component). The issue allows a low-privileged, network-accessible attacker via RAD to gain unauthorized access to data and potentially modify data due to a confidentiality/integrity impact (CVSS 7.1, HIGH). The root cause is not explicitly descr...

CVE-2026-60833

Vulnerability CVE-2026-60833 affects Oracle Solaris 11.4 (Utility component). A low-privilege, local attacker with logon can exploit the flaw to compromise Oracle Solaris, potentially leading to system takeover. CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availability). Techn...

CVE-2026-60826

CVE-2026-60826 describes a vulnerability in Oracle iSupport (Oracle E-Business Suite, Internal Operations) affecting EBS versions 12.2.3–12.2.15. A high-privilege attacker with network access via HTTP can compromise Oracle iSupport, potentially taking over the service. The CVSS v3.1 base score is...

CVE-2026-60817

...

CVE-2026-60802

...

CVE-2026-60793

The CVE-2026-60793 entry concerns Oracle E-Business Suite, Oracle TeleSales (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to compromise Oracle TeleSales, potentially leading to unauthorized creation, ...

CVE-2026-60784

...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60695

The CVE-2026-60695 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability, described across NVD/NVD mirror entries, allows a highly-privileged attacker who can reach the system over HTTP to comprom...

CVE-2026-60688

CVE-2026-60688 affects Oracle E-Business Suite, Oracle Scheduler (Rules UI) with affected versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker over HTTP with network access, enabling unauthorized updates, inserts, or deletes on Oracle Scheduler data, unauthorize...

CVE-2026-60684

...

CVE-2026-60671

CVE-2026-60671 is a vulnerability in Oracle Analytics’ Oracle Business Intelligence Enterprise Edition (BI Platform Security) affecting supported versions 8.2.0.0.0 and 26.01.0.0.0. The flaw allows an unauthenticated, network-accessing attacker over HTTP to cause a complete denial of service via ...

CVE-2026-60658

...

CVE-2026-60656

The CVE-2026-60656 entry concerns Oracle WebCenter Content (Oracle Fusion Middleware), specifically the Web Content Management component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to tak...

CVE-2026-60657

...