261918 matches found
CVE-2026-61112
The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...
CVE-2026-61114
...
CVE-2026-61113
The CVE-2026-61113 entry affects Oracle E-Business Suite’s Oracle Application Object Library (Core) in versions 12.2.3–12.2.15. It can be exploited by an unauthenticated attacker over HTTP to compromise data, with confidentiality and integrity impacts (CVSS v3.1: 7.4, HIGH). The description notes...
CVE-2026-61111
...
CVE-2026-61109
...
CVE-2026-61107
...
CVE-2026-61107
CVE-2026-61107 describes a vulnerability in Oracle Applications DBA (Oracle E-Business Suite Internal Operations) affecting 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access over HTTP to compromise Oracle Applications DBA, potentially leading to take over...
CVE-2026-61105
The CVE-2026-61105 entry describes a vulnerability in Oracle Banking Trade Finance (Infrastructure) affecting Oracle Financial Services Applications, versions 14.6.0–14.8.0. The flaw enables a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation/modification/deleti...
CVE-2026-61101
...
CVE-2026-61101
CVE-2026-61101 affects Oracle MES for Process Manufacturing (Internal Operations) within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows unauthenticated network access via HTTP and requires user interaction, with potential for unauthorized read and write of Oracle MES d...
CVE-2026-61099
The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...
CVE-2026-61097
...
CVE-2026-61097
CVE-2026-61097 describes a vulnerability in Oracle Financial Services Applications, specifically the Oracle Banking Trade Finance Process Management product (component: Common). Affected are versions 14.6.0 through 14.8.0. The flaw enables an unauthenticated attacker with network access via HTTP ...
CVE-2026-61093
...
CVE-2026-61092
...
CVE-2026-61091
CVE-2026-61091 affects Oracle Communications Billing and Revenue Management (BRM Server). Affected versions are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. The flaw is exploitable locally by a low-privilege user with logon to the infrastructure hosting BRM, potentially leading to takeover ...
CVE-2026-61086
CVE-2026-61086 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise SCM Order Management product (component: Security) in version 9.2. The vulnerability is exploitable by an unauthenticated attacker over HTTPS with network access, allowing access to or disclosure of data within the S...
CVE-2026-61089
The CVE-2026-61089 entry concerns Oracle PeopleSoft Enterprise SCM Inventory (component: Security) with affected version 9.2. The vulnerability allows unauthenticated network access via HTTP to compromise SCM Inventory, potentially yielding unauthorized data access and the ability to update/inser...