CVE-2026-60957

CVE-2026-60957 affects Oracle Transportation Execution in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged, network-accessible attacker via HTTP and requires user interaction; it can lead to unauthorized upda...

CVE-2026-60951

...

CVE-2026-60943

...

CVE-2026-60937

...

CVE-2026-60930

...

CVE-2026-60913

Vulnerability CVE-2026-60913 affects Oracle E-Business Suite, Oracle Property Manager (Internal Operations) in versions 12.2.3–12.2.15. A high-privileged attacker with local access can compromise the Property Manager and gain unauthorized read access to a subset of its data. CVSSv3.1 base score i...

CVE-2026-60910

...

CVE-2026-60872

...

CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60840

...

CVE-2026-60813

CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...

CVE-2026-60790

...

CVE-2026-60788

...

CVE-2026-60770

...

CVE-2026-60760

...

CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60723

...

CVE-2026-60678

...

CVE-2026-60681

...

CVE-2026-60673

The CVE-2026-60673 entry concerns Oracle BI Publisher (Oracle Analytics) with affected XML Services. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, leading to unauthorized access to Oracle...