CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60859

...

CVE-2026-60852

...

CVE-2026-60843

...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60817

CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...

CVE-2026-60790

...

CVE-2026-60780

...

CVE-2026-60776

...

CVE-2026-60774

...

CVE-2026-60756

...

CVE-2026-60750

...

CVE-2026-60740

...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...

CVE-2026-60700

The CVE-2026-60700 entry concerns Oracle E-Business Suite Oracle Universal Work Queue (UWQ) server issues. Affected are 12.2.3–12.2.15; the flaw allows unauthenticated, HTTP-accessible remote compromise, with human interaction required, leading to unauthorized creation/deletion/modification of UW...

CVE-2026-60689

Summary : CVE-2026-60689 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) in versions 22.3–26.5. It allows an unauthenticated, network-accessible attacker (via HTTP) to compromise the system, potentially enabling unauthorized access to critical data or complete access to all Si...

CVE-2026-60686

CVE-2026-60686 affects Oracle E-Business Suite, Oracle U.S. Federal Financials (Internal Operations) with affected 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit over HTTP to potentially modify, delete, or read critical data in Oracle U.S. Federal Financials, per the pr...

CVE-2026-60681

...

CVE-2026-60675

CVE-2026-60675 affects Oracle E-Business Suite’s Oracle Applications Framework (OAF) – specifically the Search Bean component – in versions 12.2.3–12.2.15. The vulnerability enables a network-accessible, low-privilege attacker over HTTP to compromise OAF, potentially taking over the framework. CV...

CVE-2026-60667

...