9224 matches found
CVE-2026-61280
Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...
CVE-2026-61277
CVE-2026-61277 affects Oracle E-Business Suite, Oracle Marketing (Audience) module. Affected versions: 12.2.3–12.2.15. Exploitation requires network access over HTTP by a low-privileged user, enabling unauthorized update/insert/delete and read of Oracle Marketing data, and partial denial of servi...
CVE-2026-61280
...
CVE-2026-61269
Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...
CVE-2026-61264
CVE-2026-61264 affects Oracle E-Business Suite’s Oracle Call Center Technology (RDBMS and UI) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network attacker with HTTP access to cause unauthorized update/insert/delete and read access to Oracle Call Center Technology data (...
CVE-2026-61260
...
CVE-2026-61257
Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...
CVE-2026-61257
...
CVE-2026-61255
The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...
CVE-2026-61256
The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...
CVE-2026-61252
CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...
CVE-2026-61250
CVE-2026-61250 affects Oracle E-Business Suite Oracle Payroll (component: Payroll). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to Oracle Payroll data. CVSS 3.1 base sc...
CVE-2026-61244
The CVE concerns Oracle PeopleSoft Enterprise FIN Manufacturing Argentina (component: Manufacturing), affected in version 9.1. It describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion or modification of data, and unauthorized acc...
CVE-2026-61244
...
CVE-2026-61243
CVE-2026-61243 affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component: Staffing), with affected version 9.1. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and can lead to takeover of the system, per CVSS 3.1 base metrics (8.8, HI...
CVE-2026-61242
CVE-2026-61242 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Staffing), with the affected version reported as 9.1. The vulnerability enables a low-privileged, unauthenticated attacker (network access over HTTP) to compromise the target, potentially enabling takeover of People...
CVE-2026-61238
The CVE-2026-61238 entry concerns Oracle PeopleSoft: FIN Common Objects Argentina, affected in the eProcurement component of PeopleSoft Enterprise FIN, version 9.1. The vulnerability is exploitable with network access over HTTP by an unauthenticated attacker, potentially leading to unauthorized c...
CVE-2026-61232
CVE-2026-61232 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) with affected version 9.1. An unauthenticated attacker with network access via HTTP can compromise data. The provided documents do not specify a remediation or patch version.