CVE-2026-61304: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price...

CVE-2026-61218: Improper Access Control

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite component: Search Integration Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-63168

Name of the Vulnerable Software and Affected Versions Oracle Product Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Product Workbench allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-60855: Improper Privilege Management

Vulnerability in the Oracle Quality product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful...

PT-2026-62779

Name of the Vulnerable Software and Affected Versions Oracle iReceivables versions 12.2.3 through 12.2.15 Description An issue exists in the AR Web Utilities component of the Oracle iReceivables product within Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can...

CVE-2026-61064: Improper Privilege Management

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Install / Upgrade Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment...

PT-2026-63011

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Configure to Order versions 12.2.3 through 12.2.15 Description A flaw in the Supply to Order Workbench component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lea...

CVE-2026-60776: Improper Access Control

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: AOL Generic Loader. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-61111: Improper Access Control

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Application Object...

CVE-2026-60734: Improper Access Control

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

PT-2026-62139

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-61338: Improper Access Control

Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts...

CVE-2026-60336: Improper Access Control

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

PT-2026-62885

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS Ireland versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitatio...

CVE-2026-60813: Improper Access Control

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2026-60828: Improper Access Control

Vulnerability in the Oracle Interaction Blending product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Interacti...

CVE-2026-60974: Improper Access Control

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Tax...

CVE-2026-60972: Improper Access Control

Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Tax...

CVE-2026-61116: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object...

PT-2026-62718

Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle U.S...