CVE-2026-60847

Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Entry executes t...

CVE-2026-62567

Oracle HRMS (UK) in Oracle E-Business Suite (UK Payroll) is affected on versions 12.2.3–12.2.15. The issue is exploitable with network access via HTTP by a low-privileged user, potentially leading to unauthorized access to critical data across Oracle HRMS (UK) and potentially other products (scop...

CVE-2026-62542

...

CVE-2026-62503

...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62468

...

CVE-2026-62451

...

CVE-2026-62443

CVE-2026-62443 affects Oracle Contracts Integration in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise the component, with successful attacks requiring user interaction. Impacts include un...

CVE-2026-61320

CVE-2026-61320 affects Oracle E‑Business Suite Payables (Internal Operations) in 12.2.8–12.2.15. The vulnerability is exploitable over HTTP with low privileges and can lead to takeover of Oracle Payables (CVSS v3.1 base 8.8). Oracle’s July 2026 CPU advisory contains the patches for this issue; ap...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61301

CVE-2026-61301 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a network-exposed, low-privilege attacker (via HTTP) to compromise data integrity and confidentiality; impact on availabili...

CVE-2026-61280

...

CVE-2026-61279

...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-61263

...

CVE-2026-61257

...

CVE-2026-61256

...

CVE-2026-61247

CVE-2026-61247 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be triggered by an unauthenticated attacker who can access via SMTP over the network, enabling unauthorized update/ins...

CVE-2026-61210

CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...