CVE-2026-61327

...

CVE-2026-61327

CVE-2026-61327 affects Oracle E-Business Suite's Oracle Bills of Materials (component: Internal Operations) on supported 12.2.13–12.2.15. The vulnerability allows a low-privileged, unauthenticated (network access via HTTP) attacker to unauthorizedly create, delete, or modify critical data within ...

CVE-2026-61324

...

CVE-2026-61323

...

CVE-2026-61315

...

CVE-2026-61311

...

CVE-2026-61314

...

CVE-2026-61312

Affected product: Oracle E-Business Suite, Oracle Product Hub (Internal Operations) with versions 12.2.3–12.2.15. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Product Hub, potentially affecting additional products and enabling takeover of the hu...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61314

CVE-2026-61314 affects Oracle EDI Gateway within Oracle E-Business Suite, specifically the All Miscellaneous EDI Issues component, for supported 12.2.3–12.2.15 releases. The vulnerability is exploitable over HTTP with network access by a high-privilege attacker and can lead to takeover of the Ora...

CVE-2026-61304

...

CVE-2026-61309

...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61301

...

CVE-2026-61294

...

CVE-2026-61297

CVE-2026-61297 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access, potentially leading to unauthorized creation, deletion, or modification...

CVE-2026-61297

...

CVE-2026-61287

Oracle E-Business Suite Process Manufacturing Systems (Internal Operations) is affected in 12.2.3–12.2.15. A low-privilege, unauthenticated attacker could leverage HTTP access to modify or delete data and access data unauthorizedly, with no availability impact, per CVSS 3.1 base score 8.1. The CV...

CVE-2026-61289

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Product Development product (Quality Management Specs) with affected version 12.2.15. The vulnerability is exploitable remotely over HTTP by a low-privileged user and can lead to takeover of Oracle Process Manu...

CVE-2026-61289

...