CVE-2026-62473

CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61234

CVE-2026-61234 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: eProcurement), with affected version 9.1. Affected in unauthenticated, network-accessible via HTTP; impacts include unauthorized create/delete/modify of data and full data access (C/H I/H A:N). The root caus...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61148

Summary: CVE-2026-61148 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege user over HTTP with network access and can lead to takeover of the Guided Search/Exp...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61063

CVE-2026-61063 describes a vulnerability in Oracle PeopleSoft: SCM Supplier Contract Management (component: Security) for the 9.2 line. The vulnerability allows a local, low-privilege user with logon to the infrastructure where PeopleSoft SCM Supplier Contract Management runs to compromise the af...

CVE-2026-61053

CVE-2026-61053 affects Oracle Communications BRM - Elastic Charging Engine (Diameter Gateway and SDK). Affected versions: 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0. The vulnerability can be exploited by a low-privilege user who can log on to the infrastructure where the BRM engine runs, pote...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60790

Oracle E-Business Suite's Oracle Sales Offline (component: Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-60790 vulnerability can be exploited by a high-privilege attacker with network access via HTTP to take over Oracle Sales Offline, with potential scope impact on rel...

CVE-2026-60778

Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...

CVE-2026-60725

CVE-2026-60725 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The issue allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, leading to unauthorized creation, deletion or modification of data access...

CVE-2026-60719

CVE-2026-60719 affects Oracle Analytics’ Oracle BI Publisher Web Service API. Affected: 8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0. A low-privilege attacker with network access over HTTP can compromise Oracle BI Publisher, potentially exposing or altering confidential data across Oracle BI Publisher data...

CVE-2026-60701

CVE-2026-60701 is a vulnerability in Oracle E-Business Suite’s Oracle Universal Work Queue, specifically the Work Provider Site Level Administration component. Affected versions are 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access via HTTP to compromise ...

CVE-2026-60692

CVE-2026-60692 affects Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP from the network, with no user interaction required, leading to takeov...