CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...

CVE-2026-60962

CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...

CVE-2026-60937

...

CVE-2026-60904

The CVE-2026-60904 entry applies to Oracle E-Business Suite, Oracle Installed Base product, component Create Item Instance. Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable over the network via HTTP by a low-privileged attacker, potentially leading to unauthorized creati...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60859

...

CVE-2026-60852

...

CVE-2026-60843

...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60817

CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...

CVE-2026-60790

...

CVE-2026-60780

...

CVE-2026-60776

...

CVE-2026-60774

...

CVE-2026-60756

...

CVE-2026-60750

...

CVE-2026-60740

...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...