CVE-2026-62548

The CVE-2026-62548 vulnerability affects the Oracle HRMS (US) component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (US), with potential takeover (as state...

CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2026-62534

...

CVE-2026-62542

...

CVE-2026-62521

...

CVE-2026-62525

CVE-2026-62525 describes a vulnerability in the Oracle Quality component of Oracle E-Business Suite (Quality Workbench HTML system). Affected are supported Oracle E-Business Suite 12.2.3–12.2.15. The issue can be exploited by a low-privilege, unauthenticated attacker over HTTP to perform unauthor...

CVE-2026-62524

...

CVE-2026-62518

Affected product: Oracle E-Business Suite — Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. Vulnerability details: Low-privilege, network-access attacker (via HTTP) can compromise Oracle Production Scheduling, with potential unauthorized create/delete/modify of data, unaut...

CVE-2026-62515

...

CVE-2026-62513

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Regulatory Management product (Internal Operations). Affected are 12.2.3–12.2.15. The flaw can be exploited by a low-privilege attacker with network access via HTTP to gain unauthorized access to data or perfor...

CVE-2026-62508

...

CVE-2026-62508

CVE-2026-62508 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The flaw can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracle Time and Labor. The CVSS 3.1 base score is 3.1...

CVE-2026-62505

CVE-2026-62505 affects Oracle Time and Labor, a component of Oracle E-Business Suite, with impacted versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker able to reach Oracle Time and Labor over HTTP to compromise data, with the attack requiring human interaction. Potentia...

CVE-2026-62505

...

CVE-2026-62496

...

CVE-2026-62493

CVE-2026-62493 affects Oracle E-Business Suite – Oracle Purchasing (Internal Operations). Affected versions are 12.2.11–12.2.15. The vulnerability is exploitable by a low-privilege user with network access over HTTP and can lead to takeover of Oracle Purchasing. CVSS v3.1 base score is 7.5 (Impac...

CVE-2026-62495

CVE-2026-62495 concerns Oracle E-Business Suite (Process Manufacturing → Process Execution) vulnerable in 12.2.15. The flaw allegedly enables a low-privileged, network-accessing attacker (via HTTP) to take over the Oracle Process Manufacturing Process Execution, with impact on confidentiality, in...

CVE-2026-62484

...

CVE-2026-62486

...

CVE-2026-62480

The CVE-2026-62480 entry covers a vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite), specifically the Internal Operations component. Affected are versions 12.2.3 through 12.2.15. The description states that a low-privileged attacker with network access over HTTP can compr...