CVE-2026-60778

Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...

CVE-2026-60776

...

CVE-2026-60756

...

CVE-2026-60741

CVE-2026-60741 affects Oracle E-Business Suite Oracle Cost Management (Internal Operations) with vulnerable versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Cost Management, potentially creating, deleting, or modifying data across all accessible ...

CVE-2026-60736

...

CVE-2026-60725

CVE-2026-60725 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The issue allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, leading to unauthorized creation, deletion or modification of data access...

CVE-2026-60719

CVE-2026-60719 affects Oracle Analytics’ Oracle BI Publisher Web Service API. Affected: 8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0. A low-privilege attacker with network access over HTTP can compromise Oracle BI Publisher, potentially exposing or altering confidential data across Oracle BI Publisher data...

CVE-2026-60708

CVE-2026-60708 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privileged attacker over HTTP with network access, potentially enabling creation, deletion or modificati...

CVE-2026-60701

CVE-2026-60701 is a vulnerability in Oracle E-Business Suite’s Oracle Universal Work Queue, specifically the Work Provider Site Level Administration component. Affected versions are 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access via HTTP to compromise ...

CVE-2026-60700

...

CVE-2026-60692

...

CVE-2026-60692

CVE-2026-60692 affects Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP from the network, with no user interaction required, leading to takeov...

CVE-2026-60685

...

CVE-2026-60677

...

CVE-2026-60666

...

CVE-2026-60663

...

CVE-2026-60652

...

CVE-2026-60646

...

CVE-2026-60639

...

CVE-2026-60602

The CVE affects Oracle PeopleSoft Enterprise CS Student Financials Billing (component: Billing), specifically version 9.2.38. It describes a vulnerability that lets a low-privileged user with network access via HTTP compromise the system and potentially takeover PeopleSoft CS Student Financials. ...