CVE-2026-60599

The CVE-2026-60599 entry applies to Oracle PeopleSoft: Enterprise CS Student Records, specifically the Research Tracking component, affected in version 9.2.38. The vulnerability is exploitable with network access over HTTPS by a low-privilege attacker, leading to unauthorized creation, deletion o...

CVE-2026-60598

The CVE-2026-60598 affects Oracle PeopleSoft: Enterprise CS Student Records (component: Research Tracking) with vulnerable version 9.2.38. A low-privilege user with network access over HTTP can compromise the system, potentially taking over the PeopleSoft CS Student Records process. The CVSS 3.1 ...

CVE-2026-60596

...

CVE-2026-60597

...

CVE-2026-60593

...

CVE-2026-60594

...

CVE-2026-60595

CVE-2026-60595 affects Oracle PeopleSoft Enterprise FIN Pay/Bill Management (Paybill Management) on version 9.2. The underlying issue is within Paybill Management, enabling a low-privileged attacker who can log on to the infrastructure where PeopleSoft FIN Pay/Bill Management runs to compromise t...

CVE-2026-60595

...

CVE-2026-60586

...

CVE-2026-60587

CVE-2026-60587 affects Oracle E-Business Suite, Oracle Project Foundation (Project Definition) in 12.2.3–12.2.15. Vulnerability allows a low-privileged, network-accessible attacker (HTTP) to perform unauthorized update/insert/delete and read of Oracle Project Foundation data and to cause partial ...

CVE-2026-60583

CVE-2026-60583 affects Oracle Transportation Management (Oracle Supply Chain), specifically the Install component in version 6.5.3. The vulnerability is exploitable over a network via HTTP by a low-privilege attacker, with sufficient impact to lead to takeover of Oracle Transportation Management ...

CVE-2026-60584

Summary: CVE-2026-60584 affects Oracle Transportation Management (OTM) 6.5.3, specifically the CSV Management component. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially leading to unauthorized data access, unauthorized updates/deletes, and ...

CVE-2026-60581

CVE-2026-60581 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Core), version V16. An unauthenticated attacker with access to the physical network segment attached to the hardware running the framework can compromise and potentially take over the Oracle Enterprise Com...

CVE-2026-60582

...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60575

...

CVE-2026-60576

The CVE-2026-60576 entry describes a vulnerability in Oracle E-Business Suite's Oracle Enterprise Command Center Framework (component: Core), affected in version V16. An attacker with high privileges can exploit it over HTTP with network access to potentially take over the Oracle Enterprise Comma...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60572

The CVE-2026-60572 entry concerns Oracle E-Business Suite Integrated SOA Gateway (Web Service Provider) with affected versions 12.2.3–12.2.15. The vulnerability, described as easily exploitable, allows a low-privilege, network-accessible attacker over HTTP to compromise data: unauthorized update/...