72342 matches found
CVE-2026-60848
...
CVE-2026-60846
CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...
CVE-2026-60843
CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...
CVE-2026-60845
...
CVE-2026-60844
...
CVE-2026-60843
...
CVE-2026-60845
CVE-2026-60845 concerns Oracle E-Business Suite’s Oracle Mobile Application Server (MWA General Bugs). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a high-privilege attacker over HTTP to compromise Oracle Mobile Application Server, potentially leading to takeover. C...
CVE-2026-60842
CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...
CVE-2026-60840
...
CVE-2026-60833
Vulnerability CVE-2026-60833 affects Oracle Solaris 11.4 (Utility component). A low-privilege, local attacker with logon can exploit the flaw to compromise Oracle Solaris, potentially leading to system takeover. CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availability). Techn...
CVE-2026-60835
CVE-2026-60835 affects Oracle E-Business Suite Price Protection (Internal Operations) in versions 12.2.3–12.2.15. The flaw allows a low-privileged attacker over HTTP with network access to compromise Oracle Price Protection, risking unauthorized access to sensitive data. Affected product: Oracle ...
CVE-2026-60829
CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...
CVE-2026-60817
CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...
CVE-2026-60813
CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...
CVE-2026-60816
CVE-2026-60816 affects Oracle iStore (Oracle E-Business Suite, Shopping Cart) in versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access via HTTP to compromise iStore and may lead to unauthorized access to critical data or all accessible iStore data. Base score 5.3 (...
CVE-2026-60815
CVE-2026-60815 affects Oracle iStore (Shopping Cart) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by an unauthenticated network user and requires user interaction. It can lead to unauthorized update/insert/delete and read access to Oracle iStore ...
CVE-2026-60811
CVE-2026-60811 affects Oracle E-Business Suite’s Oracle Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to perform unauthorized updates/insertions/deletions and to read ...
CVE-2026-60812
...
CVE-2026-60804
CVE-2026-60804 affects Oracle E-Business Intelligence (Definition) within Oracle E-Business Suite, affected for versions 12.2.3–12.2.15 . The vulnerability is exploitable by a high-privilege attacker with network access via HTTP; exploitation requires user interaction and can lead to an unauthori...