CVE-2026-61280

Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...

CVE-2026-61278

...

CVE-2026-61280

...

CVE-2026-61274

...

CVE-2026-61271

...

CVE-2026-61266

...

CVE-2026-61269

Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...

CVE-2026-61267

...

CVE-2026-61264

...

CVE-2026-61264

CVE-2026-61264 affects Oracle E-Business Suite’s Oracle Call Center Technology (RDBMS and UI) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network attacker with HTTP access to cause unauthorized update/insert/delete and read access to Oracle Call Center Technology data (...

CVE-2026-61260

...

CVE-2026-61257

Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...

CVE-2026-61257

...

CVE-2026-61257

...

CVE-2026-61260

...

CVE-2026-61255

The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-61252

CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...

CVE-2026-61250

CVE-2026-61250 affects Oracle E-Business Suite Oracle Payroll (component: Payroll). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to Oracle Payroll data. CVSS 3.1 base sc...

CVE-2026-61244

The CVE concerns Oracle PeopleSoft Enterprise FIN Manufacturing Argentina (component: Manufacturing), affected in version 9.1. It describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion or modification of data, and unauthorized acc...