CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60922

The CVE-2026-60922 entry concerns Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations). Affected: 12.2.3–12.2.15. The issue is exploitable by a low-privilege actor with network access over HTTP and can lead to unauthorized read access of a subset of iSupplier Portal data. The C...

CVE-2026-60918

CVE-2026-60918 concerns Oracle E-Business Suite’s Shipping Execution (component: Internal Operations). Affected are Oracle E-Business Suite versions 12.2.12 through 12.2.15. The vulnerability enables a high-privilege attacker who can access the system over HTTP to compromise Oracle Shipping Execu...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...

CVE-2026-60846

CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...

CVE-2026-60828

CVE-2026-60828 affects Oracle Interaction Blending within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The flaw lets a high-privilege attacker with network access over HTTP compromise Oracle Interaction Blending, potentially resulting in takeover and impact...

CVE-2026-60815

CVE-2026-60815 affects Oracle iStore (Shopping Cart) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by an unauthenticated network user and requires user interaction. It can lead to unauthorized update/insert/delete and read access to Oracle iStore ...

CVE-2026-60812

CVE-2026-60812 affects Oracle E-Business Suite’s Supply Chain Trading Connector (Collaboration History), with affected versions 12.2.3–12.2.15. The vulnerability is network-exploitable via HTTP by a low-privileged user and can lead to unauthorized access to data; CVSS v3.1 base score 6.5 (Confide...

CVE-2026-60804

CVE-2026-60804 affects Oracle E-Business Intelligence (Definition) within Oracle E-Business Suite, affected for versions 12.2.3–12.2.15 . The vulnerability is exploitable by a high-privilege attacker with network access via HTTP; exploitation requires user interaction and can lead to an unauthori...

CVE-2026-60793

The CVE-2026-60793 entry concerns Oracle E-Business Suite, Oracle TeleSales (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to compromise Oracle TeleSales, potentially leading to unauthorized creation, ...

CVE-2026-60789

CVE-2026-60789 affects Oracle Sales Offline in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The flaw allows a low-privilege, network-authenticated attacker over HTTP to take over Oracle Sales Offline, per CVSS 3.1 base score 8.8 (High). No exploitation details are pr...

CVE-2026-60786

Summary (CVE-2026-60786): A vulnerability in Oracle Receivables (Oracle E-Business Suite) affecting the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle Receivables, potentiall...

CVE-2026-60777

CVE-2026-60777 affects Oracle E-Business Suite Oracle Application Object Library (Core) with 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can update/insert/delete data and read data, with partial DOS impact. CVSS 3.1 base score 6.3 (LOW confidentiality, integrity, a...

CVE-2026-60780

CVE-2026-60780 affects Oracle Workflow in Oracle E-Business Suite (Internal Operations). Affected: 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker with network access via SMTP to compromise Oracle Workflow, potentially taking over the workflow. CVSS 3.1 base scor...

CVE-2026-60771

CVE-2026-60771 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair and Overhaul (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, enabling unau...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60749

CVE-2026-60749 is a vulnerability in Oracle Assets (Oracle E-Business Suite), affecting 12.2.3–12.2.15 of the Internal Operations component. The issue is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of critical da...

CVE-2026-60755

Summary of CVE-2026-60755 (Oracle E-Business Suite – Oracle Assets) : The vulnerability affects Oracle Assets (Internal Operations) within Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.15. An attacker with high privileges can exploit this over the network via HTTP to compr...

CVE-2026-60744

CVE-2026-60744 affects Oracle E-Business Suite Cost Management (Internal Operations) in supported 12.2.3–12.2.15. The vulnerability, exploitable by a low-privilege attacker with network access over HTTP, can lead to unauthorized creation, deletion or modification of data within Oracle Cost Manage...

CVE-2026-60739

CVE-2026-60739 affects Oracle Field Service within Oracle E-Business Suite (component: Internal Operations) and is applicable to supported versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker who has network access via HTTP to compromise Oracle Field Service, p...