537 matches found
CVE-2026-16484
creationtimestamp| type| source ---|---|--- 2026-07-21 21:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6seqmyr62x...
CVE-2026-62527
...
CVE-2026-62473
CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...
CVE-2026-62445
...
CVE-2026-61316
...
CVE-2026-61311
The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....
CVE-2026-61234
CVE-2026-61234 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: eProcurement), with affected version 9.1. Affected in unauthenticated, network-accessible via HTTP; impacts include unauthorized create/delete/modify of data and full data access (C/H I/H A:N). The root caus...
CVE-2026-61202
CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...
CVE-2026-61148
Summary: CVE-2026-61148 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Experience Manager) with affected version 11.4.0. The vulnerability is exploitable by a low-privilege user over HTTP with network access and can lead to takeover of the Guided Search/Exp...
CVE-2026-61128
CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...
CVE-2026-61063
CVE-2026-61063 describes a vulnerability in Oracle PeopleSoft: SCM Supplier Contract Management (component: Security) for the 9.2 line. The vulnerability allows a local, low-privilege user with logon to the infrastructure where PeopleSoft SCM Supplier Contract Management runs to compromise the af...
CVE-2026-61053
CVE-2026-61053 affects Oracle Communications BRM - Elastic Charging Engine (Diameter Gateway and SDK). Affected versions: 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0. The vulnerability can be exploited by a low-privilege user who can log on to the infrastructure where the BRM engine runs, pote...
CVE-2026-61027
CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...
CVE-2026-61013
Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...
CVE-2026-60988
CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...
CVE-2026-60950
CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...
CVE-2026-60901
An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...
CVE-2026-60829
CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...
CVE-2026-60790
Oracle E-Business Suite's Oracle Sales Offline (component: Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-60790 vulnerability can be exploited by a high-privilege attacker with network access via HTTP to take over Oracle Sales Offline, with potential scope impact on rel...
CVE-2026-60778
Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...