CVE-2026-101816

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high privileged attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Product Hub, potentially ...

CVE-2026-101814

A vulnerability exists in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management ) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Engineering, potentially resulting i...

CVE-2026-101815

A vulnerability exists in the Assets product of Oracle E-Business Suite (component: Internal Operations ) affecting supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to cause a complete DOS (hang or repeatable crash), perform unauthor...

CVE-2026-101812

The Oracle E-Business Suite product Oracle Complex Maintenance, Repair and Overhaul (specifically the LOV component) is vulnerable in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to compromise the product. Su...

CVE-2026-101813

A vulnerability exists in the Change Management component of the Oracle Engineering product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise Oracle Engineering, potentially...

CVE-2026-101807

A vulnerability exists in the BRM Server component of Oracle Communications Billing and Revenue Management affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the ...

CVE-2026-101809

The Workflow Notification Mailer component of Oracle E-Business Suite (versions 12.2.3-12.2.15) is vulnerable to a critical flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise and take over Workflow . Due to a scope change , successful explo...

CVE-2026-101808

A vulnerability exists in the WebUI component of the Oracle Product Workbench product within Oracle E-Business Suite (versions 12.2.3-12.2.15). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the workbench. Successful exploitation can lead to unauthori...

CVE-2026-101805

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A high-privileged attacker with network access via HTTP can exploit this issue to compromise the Applications Manager. Successful expl...

CVE-2026-101782

A vulnerability exists in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An attacker with low privileges and network access via HTTP can exploit this easily to compromise the manager. Successful exp...

CVE-2026-101767

A critical vulnerability exists in the Oracle Application Object Library within the Core component of Oracle E-Business Suite (versions 12.2.3-12.2.15). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the Oracle Application Object Library, poten...

CVE-2026-101768

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this...

CVE-2026-101768

A vulnerability exists in the Connector/J component of Oracle MySQL Connectors (version 26.7.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise and potentially take over MySQL Connectors. This flaw impacts Confidentialit...

CVE-2026-101765

A vulnerability in the Oracle Communications Billing and Revenue Management product (component: BRM Server ) affects supported versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the s...

CVE-2026-101759

A vulnerability exists in the BRM Server component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful ex...

CVE-2026-101758

A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the s...

CVE-2026-101744

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1) within the Oracle Supply Chain suite. A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to ...

CVE-2026-101745

A vulnerability exists in the Engineering Communication Interface component of the Oracle Agile Engineering Data Management product (version 6.2.1 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to gain unauthorized read access to a subset of accessible da...

CVE-2026-101742

A vulnerability exists in the Diagnostics component of the Oracle Applications Manager product within Oracle E-Business Suite . Affected supported versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Oracle...

CVE-2026-101738

The Oracle Agile Engineering Data Management product (component: Engineering Communication Interface ) is affected by a vulnerability in version 6.2.1 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Successful ...