CVE-2026-60847: Improper Privilege Management

Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Entry executes t...

CVE-2026-60911: Improper Authorization

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Property...

CVE-2026-62488: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts...

PT-2026-63160

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Benefits product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can exploit th...

CVE-2026-61035: Improper Access Control

Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62489: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contrac...

CVE-2026-60963: Improper Access Control

Vulnerability in the Oracle Treasury product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Treasury. Successful...

PT-2026-62921

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Customers Online versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-16359: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-60794: Improper Access Control

Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle TeleSales. Successful...

PT-2026-63170

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Lease and Finance Management versions 12.2.11 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-62795

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

PT-2026-63081

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Labor Distribution versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

PT-2026-63228

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS US versions 12.2.3 through 12.2.15 Description An issue exists within the Internal Operations component of the Oracle HRMS US product. A high privileged attacker with network access via HTTP can exploit this...

PT-2026-62816

Name of the Vulnerable Software and Affected Versions Oracle Price Protection versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access t...

PT-2026-62790

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Intelligence versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle E-Business Intelligence product. A high privileged attacker with network acce...

PT-2026-62937

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Production Scheduling versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Production Scheduling product. A high privileged attacker with network access v...

PT-2026-62867

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Public Sector Payroll versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Public Sector Payroll product. A low privileged attacker with network access vi...

PT-2026-62757

Vulnerability in the Oracle Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attac...

PT-2026-62887

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...