PT-2026-77546

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to a...

PT-2026-77705

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. Successful attac...

CVE-2026-70710: Improper Access Control

Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite component: Security API. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation...

PT-2026-77625

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Third Party Data Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-77776

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Proposals versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Proposals product. A high privileged attacker with network access via HTTP can exploit this...

CVE-2026-70806: Missing Authentication for Critical Function

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle E-Business Tax...

CVE-2026-70813: Improper Access Control

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call...

CVE-2026-70807: Improper Access Control

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call...

PT-2026-77706

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales for Handhelds versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle Sales for Handhelds. A low privileged attacker with network access via HTTP can explo...

CVE-2026-61296: Improper Access Control

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Linear Asset Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77918

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Workflow versions 12.2.3 through 12.2.15 Description An issue exists in the Workflow Notification Mailer component of the Oracle Workflow product. An unauthenticated attacker with network access via HTTP can...

CVE-2026-70687: Improper Access Control

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...

PT-2026-77799

Name of the Vulnerable Software and Affected Versions Oracle Public Sector Human Resources versions 12.2.3 through 12.2.15 Description An issue exists in the Regression Testing component of the Oracle Public Sector Human Resources product of Oracle E-Business Suite. A high privileged attacker wit...

CVE-2026-70945: Improper Access Control

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. While the...

CVE-2026-70804: Improper Access Control

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70692: Improper Access Control

Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77825

Name of the Vulnerable Software and Affected Versions Oracle Process Manufacturing Systems versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can le...

CVE-2026-61139: Improper Access Control

Vulnerability in the Oracle Public Sector Financials International product of Oracle E-Business Suite component: Authorization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2026-70781: Improper Access Control

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successfu...

PT-2026-77840

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Loans versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...