CVE-2026-61117

...

CVE-2026-61116

...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-61111

...

CVE-2026-61104

...

CVE-2026-61096

...

CVE-2026-61093

The CVE-2026-61093 entry concerns Oracle MySQL: Server (Optimizer) with affected MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability allows a low-privilege attacker who can reach the server over multiple protocols to cause the MySQL Server/Cluster to hang or crash (complete ...

CVE-2026-61085

CVE-2026-61085 affects Oracle PeopleSoft. In the Oracle PeopleSoft SCM Inventory product (component: Security), version 9.2 is affected. The vulnerability can be exploited remotely over HTTPS by an unauthenticated attacker to gain unauthorized access to sensitive data or potentially full access t...

CVE-2026-61080

...

CVE-2026-61073

The CVE-2026-61073 affects Oracle PeopleSoft, specifically the FIN Common Objects Brazil product (component: Purchasing) with affected version 9.1. The vulnerability enables unauthenticated, network-accessible (via HTTP) compromise of PeopleSoft Enterprise FIN Common Objects Brazil, potentially l...

CVE-2026-61067

...

CVE-2026-61059

CVE-2026-61059 affects Oracle PeopleSoft (Enterprise SCM Order Management) 9.2 in the Security component. The vulnerability, exploitable via HTTP with network access and no authentication, can lead to unauthorized creation, deletion, or modification of data and potentially complete access to acce...

CVE-2026-61049

...

CVE-2026-61051

...

CVE-2026-61051

CVE-2026-61051 affects Oracle E-Business Suite, Concurrent Processing component BI Publisher Integration. Affects 12.2.3–12.2.15; vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update/insert/delete and read operations on Oracle Concurrent Processin...

CVE-2026-61044

The CVE-2026-61044 entry concerns Oracle E-Business Suite’s Production Scheduling (Internal Operations) with affected 12.2.3–12.2.15. An attacker with network access via HTTP and high privileges can potentially modify or delete data, read subset data, and cause partial denial of service in Oracle...

CVE-2026-61026

CVE-2026-61026 affects Oracle iRecruitment within Oracle E-Business Suite, specifically versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized access to critical data or full access to Oracle iRecruitment...

CVE-2026-61028

...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61006

The CVE-2026-61006 affects Oracle E-Business Suite, Oracle Process Manufacturing Logistics (Internal Operations), with affected versions 12.2.3–12.2.15. The issue enables a high-privilege attacker who can reach the service over HTTP to take control of Oracle Process Manufacturing Logistics, per C...