CVE-2026-62548

The CVE-2026-62548 vulnerability affects the Oracle HRMS (US) component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (US), with potential takeover (as state...

CVE-2026-62521

The CVE-2026-62521 entry concerns Oracle E-Business Suite, Oracle HRMS (US) Payroll General. Affected products/versions are Oracle E-Business Suite 12.2.7–12.2.15. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (US), potentially leadin...

CVE-2026-62517

The CVE-2026-62517 entry concerns the Oracle E-Business Suite Oracle Production Scheduling product (Internal Operations component). Affected are versions 12.2.3 through 12.2.15. The flaw is described as unauthenticated-over-network via HTTP with user interaction required, potentially allowing acc...

CVE-2026-62507

...

CVE-2026-62507

CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...

CVE-2026-62487

CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...

CVE-2026-61289

...

CVE-2026-61283

...

CVE-2026-61277

CVE-2026-61277 affects Oracle E-Business Suite, Oracle Marketing (Audience) module. Affected versions: 12.2.3–12.2.15. Exploitation requires network access over HTTP by a low-privileged user, enabling unauthorized update/insert/delete and read of Oracle Marketing data, and partial denial of servi...

CVE-2026-61279

...

CVE-2026-61271

The CVE-2026-61271 entry concerns Oracle E-Business Suite’s Oracle Document Management and Collaboration (Attachments), affected on versions 12.2.3–12.2.15. An unauthenticated attacker with network access over HTTP can read, update/insert/delete some data, and cause a partial Denial of Service in...

CVE-2026-61239

CVE-2026-61239 : Vulnerability in Oracle PeopleSoft FIN Common Objects Argentina (component: eProcurement) affecting the 9.1 line. UNAUTHENTICATED attacker over HTTP can compromise data: create/delete/modify access to critical data, read subset, and cause partial DOS. CVSS 3.1 base score 9.9 (CRI...

CVE-2026-61233

...

CVE-2026-61218

CVE-2026-61218 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine) and is exploitable on affected 12.2.3–12.2.15 installations. The vulnerability allows a low-privileged user with network access over HTTP to compromise the Secure Enterprise Search, pote...

CVE-2026-61221

This CVE concerns Oracle Item Master in Oracle E-Business Suite, affecting versions 12.2.3–12.2.15 (component: iSet‑up bugs). The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized updates/inserts/deletes to some Oracle Item Master data a...

CVE-2026-61179

...

CVE-2026-61181

...

CVE-2026-61178

...

CVE-2026-61174

...

CVE-2026-61170

CVE-2026-61170 affects Oracle Agile PLM 9.3.6 (Oracle Supply Chain, component: Security). The description states an unauthenticated attacker with network access via HTTP can compromise Oracle Agile PLM, potentially taking over the system. CVSS 3.1 base score 8.1 (HIGH) with network attack vector,...