CVE-2026-61005

CVE-2026-61005 concerns Oracle E-Business Suite Oracle Process Manufacturing Logistics (Internal Operations) across affected AppServer versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, potentia...

CVE-2026-61005

...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60989

...

CVE-2026-60986

...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...

CVE-2026-60974

...

CVE-2026-60973

Oracle E-Business Tax in Oracle E-Business Suite (Internal Operations) is affected for versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege user who can log on to the infrastructure where Oracle E-Business Tax runs, potentially leading to takeover of Oracle E-Business Ta...

CVE-2026-60963

...

CVE-2026-60965

CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...

CVE-2026-60960

CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...

CVE-2026-60962

...

CVE-2026-60959

...

CVE-2026-60957

...

CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-60950

...

CVE-2026-60942

The CVE-2026-60942 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine) in versions 12.2.3–12.2.15. It enables a low-privileged, network-authenticated attacker (HTTP) to potentially create/modify/delete critical data or access all data via the Fulfillment Mana...

CVE-2026-60939

The CVE-2026-60939 entry concerns Oracle E-Business Suite’s Oracle Project Contracts (Internal Operations). Affects versions 12.2.3–12.2.15; a low-privileged user with network access via HTTP can access unauthorized data read from Oracle Project Contracts. CVSS 3.1 base score is 3.1 (Confidential...

CVE-2026-60940

CVE-2026-60940 affects Oracle E-Business Suite, Oracle Service Contracts (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a high-privileged attacker with network access via HTTP and requires user interaction. Impact: unauthorized creation, deletion,...

CVE-2026-60936

The CVE-2026-60936 entry concerns Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected releases 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who can access over HTTP, potentially causing partial denial of service to Oracle Labor...