CVE-2026-101689

The Oracle E-Business Suite Integrated SOA Gateway (component: SOA Provider ) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this easily accessible vulnerability to compromise the gateway. Successful exploitation can result in unautho...

CVE-2026-101690

A vulnerability exists in the SOA Provider component of the Oracle E-Business Suite Integrated SOA Gateway (affected versions 12.2.3-12.2.15 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the gateway. Successful exploitation may lead ...

CVE-2026-101692

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite . Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading to...

CVE-2026-101688

A vulnerability exists in the SOA Provider component of the Oracle E-Business Suite Integrated SOA Gateway (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the gateway. A successful attack could result in unauth...

CVE-2026-101687

The Oracle E-Business Suite Integrated SOA Gateway product, specifically the SOA Provider component in versions 12.2.3-12.2.15 , is affected by a high-severity vulnerability. A low-privileged attacker with network access via HTTP can exploit this flaw, which is noted as difficult to exploit , to ...

CVE-2026-101685

The Oracle E-Business Suite Integrated SOA Gateway product is affected by a vulnerability in the SOA Provider component. This issue impacts supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the gateway, p...

CVE-2026-101686

A vulnerability exists in the SOA Provider component of Oracle E-Business Suite Integrated SOA Gateway (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the gateway, potentially resulting in a complete takeover of the p...

CVE-2026-101684

The Oracle E-Business Suite Integrated SOA Gateway (component: Internal Operations ) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the gateway. Successful exploitation may...

CVE-2026-101673

A vulnerability exists in the Internal Operations component of the Oracle US Federal Human Resources product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the p...

CVE-2026-101670

A vulnerability exists in the Message Component of the Oracle Email Center product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise Oracle Email Center. Successful exploitation may resul...

CVE-2026-101671

A vulnerability exists in the Oracle Email Center product of Oracle E-Business Suite (specifically the Message Component ) in supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, provided they can induce human interaction from a ...

CVE-2026-101668

A vulnerability exists in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product. Su...

CVE-2026-101669

A vulnerability exists in the Regression Testing component of the Oracle Public Sector Human Resources product within Oracle E-Business Suite. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficult-to-exploit vulnerability to...

CVE-2026-101666

A vulnerability exists in the Claim LOV component of the Oracle Trade Management product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise Oracle Trade Management, potentially gaining una...

CVE-2026-101665

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially leading to unauthoriz...

CVE-2026-101667

The Oracle Trade Management product within Oracle E-Business Suite (specifically the Claim LOV component) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can trigger ...

CVE-2026-101662

The Oracle Mobile Field Service product (component: Admin UI ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation may result in unauthorized creation, deletio...

CVE-2026-101661

The Oracle Mobile Field Service product (component: Admin UI ) within Oracle E-Business Suite is affected by a high-severity vulnerability in supported versions 12.2.3-12.2.15 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the service. ...

CVE-2026-101664

A vulnerability exists in the Internal Operations component of the Oracle Mobile Field Service product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this flaw to compromise the service,...

CVE-2026-101658

A vulnerability exists in the Admin UI component of Oracle Mobile Field Service , part of the Oracle E-Business Suite. Affected versions include 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the servi...