CVE-2026-60771: Improper Access Control

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

PT-2026-62847

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Payroll versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Payroll product. A low privileged attacker with network access via HTTP can compromise the...

PT-2026-62929

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Financials Common Country versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Financials Common Country product. A low privileged attacker with network...

CVE-2026-60684: Improper Access Control

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Upload Attachments. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62885

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS Ireland versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitatio...

CVE-2026-61255: Improper Access Control

Vulnerability in the Oracle HRMS New Zealand product of Oracle E-Business Suite component: New Zealand Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS New...

PT-2026-63160

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Advanced Benefits product of Oracle E-Business Suite. A low privileged attacker with network access via HTTP can exploit th...

PT-2026-62857

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Property Manager versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Property Manager product. A high privileged attacker with network access via HTTP ca...

CVE-2026-60578: Improper Authentication

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite component: Core. The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Enterprise Command...

CVE-2026-60685: Improper Access Control

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful...

CVE-2026-60714: Improper Access Control

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Price...

CVE-2026-60837: Improper Privilege Management

Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Price Protection...

PT-2026-62247

Name of the Vulnerable Software and Affected Versions Oracle Cost Management version V16 Description A flaw in the Enterprise Command Center component allows a high privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access, creation, deletion,...

PT-2026-62782

Name of the Vulnerable Software and Affected Versions Oracle Sales Offline versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized access, creation...

PT-2026-62869

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Public Sector Payroll versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Public Sector Payroll product. A high privileged attacker with network access v...

PT-2026-62841

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Work in Process versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation require...

PT-2026-62995

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications DBA versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Applications DBA product. A high privileged attacker with network access via HTTP ca...

PT-2026-62142

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Data Removal Tool. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources...

PT-2026-62891

Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle SDP Number...

PT-2026-63163

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Bills of Material product. A low privileged attacker with network access via HTTP...