CVE-2026-101660

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service. Successf...

CVE-2026-101655

The Oracle Mobile Field Service product, specifically within the Internal Operations component of Oracle E-Business Suite , is affected by a vulnerability in versions 12.2.3-12.2.15 . An attacker with low privileges and network access via HTTP can easily exploit this flaw to compromise the servic...

CVE-2026-101650

The Oracle Partner Management product within Oracle E-Business Suite (specifically the Internal Operations component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the product. Successful explo...

CVE-2026-101651

The Oracle Partner Management product within Oracle E-Business Suite (component: Internal Operations ) is affected by CVE-2026-101651 in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product. Successful exploitati...

CVE-2026-101647

A vulnerability exists in the Oracle iSetup product of Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerabilit...

CVE-2026-101648

A vulnerability exists in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the product. Th...

CVE-2026-101646

A vulnerability exists in the Oracle iSetup product within Oracle E-Business Suite , specifically affecting the General Ledger Update Transform and Reports components in versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle iS...

CVE-2026-101645

The Oracle iSetup product within Oracle E-Business Suite (specifically the General Ledger Update Transform and Reports components) is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP could exploit this difficulty-to-expl...

CVE-2026-101644

A vulnerability exists in the Internal Operations component of Oracle Mobile Field Service within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the prod...

CVE-2026-101643

A vulnerability exists in the Internal Operations component of the Oracle Sales Online product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product. Successful exploitation may lead to una...

CVE-2026-101639

A vulnerability exists in the Oracle Marketing product of Oracle E-Business Suite (specifically the Audience component) in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Marketing, though successful exploitation requires...

CVE-2026-101640

A vulnerability exists in the Oracle Marketing product of Oracle E-Business Suite (specifically the Audience component) in supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Impacted data may include...

CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-101634

A critical vulnerability exists in the Internal Operations component of Oracle Mobile Field Service (Oracle E-Business Suite), affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful ...

CVE-2026-101635

The Oracle Mobile Field Service product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading t...

CVE-2026-101630

A vulnerability exists in the Internal Operations component of Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the product, though successful executi...

CVE-2026-101628

The Oracle MySQL Cluster product, specifically the Cluster: NDB Operator component in version 9.7.3 , is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) ...

CVE-2026-101604

The Oracle Communications Unified Inventory Management product is vulnerable in the Security component across versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the system. Successful...

CVE-2026-101602

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (part of Oracle Supply Chain), specifically affecting version 6.2.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the...

CVE-2026-101603

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the system, potentia...