CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61024

...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60997

...

CVE-2026-60984

...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...

CVE-2026-60931

...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2026-60854

...

CVE-2026-60844

...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60823

...

CVE-2026-60812

...

CVE-2026-60800

CVE-2026-60800 affects Oracle E-Business Suite Oracle Compensation Workbench (component: Compensation Workbench), with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker and can lead to unauthorized data access and possible ...

CVE-2026-60795

...

CVE-2026-60789

CVE-2026-60789 affects Oracle Sales Offline in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The flaw allows a low-privilege, network-authenticated attacker over HTTP to take over Oracle Sales Offline, per CVSS 3.1 base score 8.8 (High). No exploitation details are pr...

CVE-2026-60790

Oracle E-Business Suite's Oracle Sales Offline (component: Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-60790 vulnerability can be exploited by a high-privilege attacker with network access via HTTP to take over Oracle Sales Offline, with potential scope impact on rel...

CVE-2026-60778

Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...