CVE-2026-60802: Improper Access Control

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-60937: Improper Access Control

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor...

CVE-2026-60867: Improper Access Control

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Pricing Installation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2026-61324: Improper Access Control

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Internal Operations. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits...

PT-2026-62791

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle E-Business Intelligence versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle E-Business Intelligence. An unauthenticated attacker with network access via HTTP...

PT-2026-62924

Name of the Vulnerable Software and Affected Versions Oracle iRecruitment versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iRecruitment product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can...

PT-2026-63221

Name of the Vulnerable Software and Affected Versions Oracle Learning Management versions 12.2.3 through 12.2.15 Description An issue exists in the Import And Export component of the Oracle Learning Management product within Oracle E-Business Suite. A low privileged attacker with network access v...

CVE-2026-61323: Improper Access Control

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Internal Operations. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits...

PT-2026-62755

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost...

PT-2026-62933

Name of the Vulnerable Software and Affected Versions Oracle Advanced Supply Chain Planning versions 12.2.3 through 12.2.15 Description An issue exists in the Core component of the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite. A high privileged attacker with network...

PT-2026-62855

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Installed Base versions 12.2.4 through 12.2.15 Description An issue exists in the Create Item Instance component of the Oracle Installed Base product. A low privileged attacker with network access via HTTP can...

PT-2026-62432

Name of the Vulnerable Software and Affected Versions Oracle Project Manufacturing version V16 Description A flaw exists in the PJM Command Center component of the Oracle Project Manufacturing product within Oracle E-Business Suite. A high-privileged attacker with access to the infrastructure whe...

PT-2026-63135

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...

CVE-2026-62559: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...

CVE-2026-61141: Improper Privilege Management

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Affordable Care Act. Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

PT-2026-63186

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-60988: Improper Privilege Management

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60683: Improper Access Control

Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-60154: Improper Access Control

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object...

CVE-2026-60859: Improper Privilege Management

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful...