CVE-2026-60813

CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...

CVE-2026-60816

CVE-2026-60816 affects Oracle iStore (Oracle E-Business Suite, Shopping Cart) in versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access via HTTP to compromise iStore and may lead to unauthorized access to critical data or all accessible iStore data. Base score 5.3 (...

CVE-2026-60815

CVE-2026-60815 affects Oracle iStore (Shopping Cart) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by an unauthenticated network user and requires user interaction. It can lead to unauthorized update/insert/delete and read access to Oracle iStore ...

CVE-2026-60811

CVE-2026-60811 affects Oracle E-Business Suite’s Oracle Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to perform unauthorized updates/insertions/deletions and to read ...

CVE-2026-60812

...

CVE-2026-60804

CVE-2026-60804 affects Oracle E-Business Intelligence (Definition) within Oracle E-Business Suite, affected for versions 12.2.3–12.2.15 . The vulnerability is exploitable by a high-privilege attacker with network access via HTTP; exploitation requires user interaction and can lead to an unauthori...

CVE-2026-60800

...

CVE-2026-60799

Oracle E-Business Suite CVE-2026-60799 affects Compensation Workbench (component: Compensation Workbench) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to access or modify Oracle Compensation Workbench data, with Confidentiali...

CVE-2026-60795

...

CVE-2026-60793

The CVE-2026-60793 entry concerns Oracle E-Business Suite, Oracle TeleSales (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to compromise Oracle TeleSales, potentially leading to unauthorized creation, ...

CVE-2026-60793

...

CVE-2026-60795

CVE-2026-60795 affects Oracle E-Business Suite iSetup in the General Ledger Update Transform/Reports component. Affected are E-Business Suite versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who has network access via HTTP, enabling unauthorized creation, de...

CVE-2026-60790

Oracle E-Business Suite's Oracle Sales Offline (component: Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-60790 vulnerability can be exploited by a high-privilege attacker with network access via HTTP to take over Oracle Sales Offline, with potential scope impact on rel...

CVE-2026-60789

CVE-2026-60789 affects Oracle Sales Offline in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The flaw allows a low-privilege, network-authenticated attacker over HTTP to take over Oracle Sales Offline, per CVSS 3.1 base score 8.8 (High). No exploitation details are pr...

CVE-2026-60788

CVE-2026-60788 affects Oracle E-Business Suite, Oracle Sales Offline, Internal Operations component, versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise Oracle Sales Offline, potentially leading to unauthorized creation, deletion o...

CVE-2026-60787

...

CVE-2026-60787

CVE-2026-60787 affects Oracle E-Business Suite Oracle Receivables, Internal Operations, with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Receivables, potentially taking over the application. CVSS 3.1 base ...

CVE-2026-60778

Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...

CVE-2026-60777

...

CVE-2026-60777

CVE-2026-60777 affects Oracle E-Business Suite Oracle Application Object Library (Core) with 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can update/insert/delete data and read data, with partial DOS impact. CVSS 3.1 base score 6.3 (LOW confidentiality, integrity, a...