CVE-2026-61280

Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...

CVE-2026-61280

...

CVE-2026-61278

CVE-2026-61278 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged user with network access, enabling unauthorized read/update/insert/delete ...

CVE-2026-61269

Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...

CVE-2026-61267

CVE-2026-61267 concerns the Oracle HCM Configuration Workbench (Oracle E-Business Suite) in the Spreadsheet Loading component. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP, enabling unauthorized u...

CVE-2026-61266

...

CVE-2026-61267

...

CVE-2026-61263

CVE-2026-61263 affects Oracle E-Business Suite, Oracle Scripting Admin, in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessing attacker over HTTP to gain unauthorized read and write access to Oracle Scripting data, with impact on confidentiality and integrity (CVS...

CVE-2026-61262

...

CVE-2026-61264

...

CVE-2026-61261

CVE-2026-61261 affects the Oracle Knowledge Management component (User Interface) of Oracle E-Business Suite, versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Knowledge Management, leading to unauthorized update/insert/delete and read access to ...

CVE-2026-61257

Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...

CVE-2026-61260

CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...

CVE-2026-61256

...

CVE-2026-61255

The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...

CVE-2026-61254

...

CVE-2026-61251

CVE-2026-61251 affects Oracle E-Business Suite HRMS (Australia) Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-adjacent attacker with HTTP access to compromise HRMS Australia, potentially exposing unauthorized data. The CVSS 3.1 base score is 6...

CVE-2026-61251

...

CVE-2026-61252

...

CVE-2026-61253

CVE-2026-61253 affects Oracle HRMS (Japanese) within Oracle E-Business Suite; impacted are Oracle Payroll Japanese in versions 12.2.3–12.2.15. The vulnerability allows unauthenticated, network-accessible exploitation via HTTPS and requires user interaction to trigger. Successful exploitation can ...