6788 matches found
CVE-2026-61082
CVE-2026-61082 affects Oracle MySQL Connectors, specifically Connector/J, with vulnerable versions 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with network access across multiple protocols to compromise MySQL Connectors, and exploitation requires user interaction. The CVSS 3...
CVE-2026-61077
CVE-2026-61077 affects Oracle PeopleSoft SCM Mobile Inventory Management (component: Security) in version 9.2. The published description indicates a vulnerability accessible to a low-privileged attacker with logon to the infrastructure hosting PeopleSoft SCM Mobile Inventory Management, potential...
CVE-2026-61074
...
CVE-2026-61068
CVE-2026-61068 : Vulnerability in Oracle PeopleSoft Enterprise FIN Billing Argentina (component: Billing) affecting version 9.1. An attacker with network access via HTTP and high privileges can exploit this to take over the PeopleSoft FIN Billing Argentina instance. The CVSSv3.1 base score is 7.2...
CVE-2026-61056
CVE-2026-61056 concerns Oracle PeopleSoft Enterprise FIN Grants (component: Grants) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise FIN Grants, potentially performing unauthorized updates, inserts, or deletes on accessib...
CVE-2026-61057
Technical details for CVE-2026-61057 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, impact, or fixes are disclosed here. Monitor Oracle advisories and NVD updates for new information.
CVE-2026-61046
CVE-2026-61046 affects Oracle E-Business Suite, Oracle Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. The issue is exploitable by a high-privilege attacker with network access via HTTP to compromise Oracle Production Scheduling, with potential scope expansion impacting re...
CVE-2026-61041
...
CVE-2026-61028
CVE-2026-61028 affects Oracle E-Business Suite Inventory Management (Internal Operations) and is limited to versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege user with logon to the executing infrastructure and can lead to partial denial of service of Oracle Inventory M...
CVE-2026-61015
Oracle E-Business Suite Time and Labor (Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-61015 vulnerability can be exploited remotely without authentication over HTTP to read a subset of data. CVSS v3.1 base score is 3.7 (Low) with Confidentiality impact=Low; other impac...
CVE-2026-61005
...
CVE-2026-61004
...
CVE-2026-60963
...
CVE-2026-60959
CVE-2026-60959 : Vulnerability in Oracle SDP Number Portability (Oracle E-Business Suite, Internal Operations). Affected: 12.2.3–12.2.15. Low-privilege, network-access attacker (via HTTP) can compromise data: unauthorized create/delete/modify of critical data or full access to all data. CVSS v3.1...
CVE-2026-60950
CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...
CVE-2026-60948
CVE-2026-60948 affects Oracle Learning Management, part of Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle Learning Management, potentially causing unauthorized creation, deletion,...
CVE-2026-60937
CVE-2026-60937 affects Oracle E-Business Suite Labor Distribution, Internal Operations component. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletions on Oracle Lab...
CVE-2026-60931
The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...