CVE-2026-60521: Improper Access Control

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Price List. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Pricing...

CVE-2026-62497: Improper Access Control

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Flow...

CVE-2026-60760: Improper Access Control

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62507: Improper Access Control

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor...

CVE-2026-47002: URL Redirection to Untrusted Site

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2026-60940: Improper Access Control

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Service...

PT-2026-62459

Name of the Vulnerable Software and Affected Versions Oracle Weblogic Server Proxy Plug-in version 15.1.1.0.0 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Weblogic Server Proxy Plug-in. This issue allows for the unauthorized creation, deletion, or...

CVE-2026-60608: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft component: Institutional Methodology Need Analysis. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-60588: Improper Access Control

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Work Definition Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-61264: Improper Access Control

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: RDBMS and UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center...

PT-2026-62830

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Order Management versions 12.2.3 through 12.2.15 Description A flaw exists in the Product Diagnostic Tools component of Oracle Order Management. A high privileged attacker with network access via HTTP can exploit...

PT-2026-62766

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw in the Graph / Charting component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

CVE-2026-60984: Improper Access Control

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60401: Improper Access Control

Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database component: Kubernetes Operator. The supported version that is affected is 26.1.1.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where TimesTen...

CVE-2026-60788: Improper Access Control

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

CVE-2026-47014: Improper Access Control

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench...

PT-2026-62725

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Asset Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires...

CVE-2026-60938: Improper Privilege Management

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor...

CVE-2026-61057: Improper Access Control

Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft component: eSettlements. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

PT-2026-62804

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. While the...