CVE-2026-60999

...

CVE-2026-61000

...

CVE-2026-60999

CVE-2026-60999 affects Oracle Data Integrator (part of Oracle Fusion Middleware) with REST service in version 14.1.2.0.0. The vulnerability is exploitable over HTTPS by an unauthenticated network attacker, potentially leading to takeover of Oracle Data Integrator. The CVSS 3.1 base score is 9.8 (...

CVE-2026-61004

...

CVE-2026-60997

...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60987

CVE-2026-60987 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the affected project portfolio analysis component, potentially causin...

CVE-2026-60986

...

CVE-2026-60972

...

CVE-2026-60972

The CVE-2026-60972 entry concerns Oracle E-Business Tax within Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15 for the Internal Operations component. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to unauthorized crea...

CVE-2026-60973

...

CVE-2026-60963

...

CVE-2026-60966

CVE-2026-60966 affects Oracle E-Business Suite’s Oracle Public Sector Human Resources (component: Regression Testing). Affected are 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access and can lead to unauthorized creation, deletion or modific...

CVE-2026-60962

...

CVE-2026-60959

CVE-2026-60959 : Vulnerability in Oracle SDP Number Portability (Oracle E-Business Suite, Internal Operations). Affected: 12.2.3–12.2.15. Low-privilege, network-access attacker (via HTTP) can compromise data: unauthorized create/delete/modify of critical data or full access to all data. CVSS v3.1...

CVE-2026-60957

...

CVE-2026-60953

...

CVE-2026-60950

...

CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...