CVE-2026-61277

CVE-2026-61277 affects Oracle E-Business Suite, Oracle Marketing (Audience) module. Affected versions: 12.2.3–12.2.15. Exploitation requires network access over HTTP by a low-privileged user, enabling unauthorized update/insert/delete and read of Oracle Marketing data, and partial denial of servi...

CVE-2026-61277

...

CVE-2026-61278

...

CVE-2026-61271

The CVE-2026-61271 entry concerns Oracle E-Business Suite’s Oracle Document Management and Collaboration (Attachments), affected on versions 12.2.3–12.2.15. An unauthenticated attacker with network access over HTTP can read, update/insert/delete some data, and cause a partial Denial of Service in...

CVE-2026-61264

...

CVE-2026-61243

...

CVE-2026-61239

CVE-2026-61239 : Vulnerability in Oracle PeopleSoft FIN Common Objects Argentina (component: eProcurement) affecting the 9.1 line. UNAUTHENTICATED attacker over HTTP can compromise data: create/delete/modify access to critical data, read subset, and cause partial DOS. CVSS 3.1 base score 9.9 (CRI...

CVE-2026-61237

...

CVE-2026-61233

...

CVE-2026-61225

...

CVE-2026-61220

...

CVE-2026-61221

This CVE concerns Oracle Item Master in Oracle E-Business Suite, affecting versions 12.2.3–12.2.15 (component: iSet‑up bugs). The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized updates/inserts/deletes to some Oracle Item Master data a...

CVE-2026-61218

CVE-2026-61218 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine) and is exploitable on affected 12.2.3–12.2.15 installations. The vulnerability allows a low-privileged user with network access over HTTP to compromise the Secure Enterprise Search, pote...

CVE-2026-61202

...

CVE-2026-61183

...

CVE-2026-61179

...

CVE-2026-61181

...

CVE-2026-61178

...

CVE-2026-61174

...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...