CVE-2026-70686: Improper Access Control

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger...

CVE-2026-70764: Improper Access Control

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger...

PT-2026-77765

Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Warehouse...

CVE-2026-70762: Improper Access Control

Vulnerability in the Oracle Risk Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Risk Management...

PT-2026-77626

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle Sales. A low privileged attacker with network access via HTTP can compromise the system, potentiall...

PT-2026-77712

Name of the Vulnerable Software and Affected Versions Oracle iSetup versions 12.2.3 through 12.2.15 Description An issue exists in the General Ledger Update Transform, Reports component of Oracle iSetup. A low privileged attacker with network access via HTTP can compromise the system, potentially...

CVE-2026-70948: Improper Access Control

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

PT-2026-77530

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials Common Modules versions 12.2.3 through 12.2.15 Description A flaw in the Common Components component allows a low privileged attacker with network access via HTTP to compromise the system. This issue c...

CVE-2026-61331: Improper Access Control

Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77939

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Purchasing product allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

PT-2026-77769

Name of the Vulnerable Software and Affected Versions Oracle Warehouse Management versions 12.2.3 through 12.2.15 Description An authorization bypass issue exists in the Internal Operations component of Oracle Warehouse Management. A low-privileged attacker with network access via HTTP can exploi...

PT-2026-77830

Name of the Vulnerable Software and Affected Versions Oracle iRecruitment versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iRecruitment product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can...

CVE-2026-70926: Missing Authentication for Critical Function

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow...

PT-2026-77805

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Scripting versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Scripting product. An unauthenticated attacker with network access via HTTP can compromise...

PT-2026-77767

Name of the Vulnerable Software and Affected Versions Oracle Warehouse Management versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Warehouse Management product of Oracle E-Business Suite. An unauthenticated attacker with network access...

CVE-2026-70775: Improper Access Control

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-71101: Improper Access Control

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Tax Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-70941: Improper Access Control

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Payroll executes to...

CVE-2026-70927: Uncontrolled Resource Consumption

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow...

CVE-2026-70918: Missing Authentication for Critical Function

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Outbound Data. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful...