CVE-2026-61127

CVE-2026-61127 affects Oracle Communications Service Catalog and Design (component: Solution Designer). Affected versions are 8.0.0.7.0–8.3.0.2.0. The vulnerability is described as easily exploitable with network access over HTTP by a low-privilege attacker, potentially leading to takeover of the...

CVE-2026-61127

...

CVE-2026-61128

...

CVE-2026-61129

...

CVE-2026-61128

CVE-2026-61128 affects Oracle MySQL products: MySQL Server (Optimizer) and MySQL Cluster, with affected versions MySQL Server 9.7.0–9.7.1 and MySQL Cluster 9.7.0–9.7.1. The vulnerability is described as exploitable by a high-privilege attacker who has network access via multiple protocols, potent...

CVE-2026-61125

Oracle E-Business Suite Configure to Order (Supply to Order Workbench) is affected in versions 12.2.3–12.2.15. A vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Configure to Order, with potential scope expansion affecting additional products. Succ...

CVE-2026-61122

...

CVE-2026-61121

Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...

CVE-2026-61122

CVE-2026-61122 affects Oracle E-Business Suite, Oracle HRMS (UK) Payroll component, for versions 12.2.9–12.2.15. A low-privilege, network-authenticated attacker (HTTP) can compromise HRMS(UK), leading to unauthorized creation/deletion/modification of critical data or full access to HRMS(UK) data....

CVE-2026-61119

...

CVE-2026-61120

...

CVE-2026-61115

...

CVE-2026-61112

The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...

CVE-2026-61113

The CVE-2026-61113 entry affects Oracle E-Business Suite’s Oracle Application Object Library (Core) in versions 12.2.3–12.2.15. It can be exploited by an unauthenticated attacker over HTTP to compromise data, with confidentiality and integrity impacts (CVSS v3.1: 7.4, HIGH). The description notes...

CVE-2026-61114

...

CVE-2026-61111

...

CVE-2026-61109

...

CVE-2026-61107

...

CVE-2026-61107

CVE-2026-61107 describes a vulnerability in Oracle Applications DBA (Oracle E-Business Suite Internal Operations) affecting 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access over HTTP to compromise Oracle Applications DBA, potentially leading to take over...

CVE-2026-61105

The CVE-2026-61105 entry describes a vulnerability in Oracle Banking Trade Finance (Infrastructure) affecting Oracle Financial Services Applications, versions 14.6.0–14.8.0. The flaw enables a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation/modification/deleti...