9491 matches found
CVE-2026-62479
...
CVE-2026-62479
CVE-2026-62479 affects Oracle E-Business Suite, Oracle Public Sector Financials (Internal Operations) in the 12.2.3–12.2.15 range. The vulnerability is exploitable remotely over HTTP by a low-privilege attacker and requires user interaction. Successful attacks could lead to unauthorized update/in...
CVE-2026-62474
...
CVE-2026-62474
CVE-2026-62474 is a vulnerability in Oracle E-Business Suite’s Oracle Lease and Finance Management product, specifically the Lease Authoring component. Affected versions are 12.2.3 through 12.2.15. The issue allows a low-privileged attacker with network access via HTTP to compromise the applicati...
CVE-2026-62472
The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...
CVE-2026-62468
...
CVE-2026-62465
...
CVE-2026-62465
...
CVE-2026-62456
...
CVE-2026-62456
...
CVE-2026-62456
Summary (MODE C): The CVE-2026-62456 affects Oracle E-Business Suite, Oracle HRMS (UK) – Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTPS to compromise Oracle HRMS (UK), potentially leading to unauthorized...
CVE-2026-62447
The CVE-2026-62447 vulnerability affects Oracle E-Business Suite, specifically the Oracle Trade Management product (Claim LOV). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over network access via HTTP, with potential confidentiality, integrit...
CVE-2026-62451
...
CVE-2026-62447
...
CVE-2026-62447
...
CVE-2026-62444
...
CVE-2026-61338
...
CVE-2026-62444
CVE-2026-62444 describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration (Internal Operations) affecting 12.2.3–12.2.15. An unauthenticated, network-accessible attacker (HTTP) can exploit it, with user interaction required, to cause unauthorized update/insert/delete and ...