CVE-2026-61053

CVE-2026-61053 affects Oracle Communications BRM - Elastic Charging Engine (Diameter Gateway and SDK). Affected versions: 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0. The vulnerability can be exploited by a low-privilege user who can log on to the infrastructure where the BRM engine runs, pote...

CVE-2026-61044

...

CVE-2026-61036

...

CVE-2026-61031

...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61024

...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60997

...

CVE-2026-60984

...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...

CVE-2026-60931

...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2026-60854

...

CVE-2026-60844

...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60823

...

CVE-2026-60812

...

CVE-2026-60800

CVE-2026-60800 affects Oracle E-Business Suite Oracle Compensation Workbench (component: Compensation Workbench), with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker and can lead to unauthorized data access and possible ...