CVE-2026-83361

A vulnerability exists in the Award/PO component of Oracle Contract Lifecycle Management for Public Sector (Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can exploit this vulnerability to gain unauthorized access to critic...

CVE-2026-83359

The Oracle HRMS (India) product, specifically the Indian Payroll component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized ac...

CVE-2026-70869

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft (PeopleSoft Enterprise PeopleTools), affecting supported versions 8.61-8.63 . This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. While the vulnerability is difficult to...

CVE-2026-60968

A vulnerability exists in the Updates Environment Mgmt component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high privileged attacker with access to the underlying infrastructure can exploit this issue to compromise the software. Successful exploitation may lead ...

CVE-2026-70860

Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects Argentina (specifically the eProcurement component) version 9.1 is affected by a difficult to exploit vulnerability. A low-privileged attacker with network access via HTTP could compromise the system, potentially gaining unauthorized crea...

CVE-2026-60887

A vulnerability exists in the Data Mover component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A high-privileged attacker with access to the infrastructure can exploit this issue, though it is difficult to execute and requires human interaction from another person....

CVE-2026-60881

Oracle PeopleSoft PeopleTools (component: Meta Data ) is affected by a vulnerability in supported versions 8.61-8.63 . A high-privileged attacker with network access via HTTP can exploit this to compromise the product, potentially gaining unauthorized access to critical data or performing a compl...

CVE-2026-60869

A vulnerability exists in the Application Data Sets component of Oracle PeopleSoft (Enterprise PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to gain unauthorized access to create, delete, or ...

CVE-2026-60876

The PeopleSoft Enterprise PeopleTools product, specifically the Search Framework component in version 8.62 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. This is considered a difficult-to-exploit vulnerability as it ...

CVE-2026-60839

A vulnerability exists in the Query component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A high-privileged attacker with network access via HTTP can exploit this flaw to cause a complete denial of service (DoS) by triggering a hang or repeatable crash. Additio...

CVE-2026-60745

Oracle PeopleSoft Enterprise PeopleTools (component: Application Server - JRE ) is affected by a vulnerability in versions 8.61-8.63 . A high-privileged attacker with access to the infrastructure where PeopleSoft Enterprise PeopleTools executes can exploit this flaw to compromise the system. Succ...

CVE-2026-101855

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Product Hub. Successful exploitatio...

CVE-2026-101851

A vulnerability exists in the Installed Base product of Oracle E-Business Suite , specifically within the Data Provider UI component. Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful ex...

CVE-2026-101850

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (component: HTML UI ) affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Installed Base, although successful attacks req...

CVE-2026-101841

A vulnerability exists in the Global Order Promising product of Oracle E-Business Suite , specifically within the Web Service component. Affected supported versions include 12.2.3 through 12.2.15 . This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HT...

CVE-2026-101835

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploitation may ...

CVE-2026-101837

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potenti...

CVE-2026-101831

A vulnerability exists in the Internal Operations component of the Oracle Quality product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Quality, potentially gaining unauthorized access to ...

CVE-2026-101829

The Oracle Mobile Application Server product of Oracle E-Business Suite (specifically the MWA Terminal Server component) is affected by a vulnerability in versions 12.2.3-12.2.15 . This issue allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful expl...

CVE-2026-101827

A vulnerability exists in the Oracle HCM Common Architecture product of Oracle E-Business Suite (specifically the Internal Operations component). This issue affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exp...