CVE-2026-61145

...

CVE-2026-61143

CVE-2026-61143 affects Oracle Communications Convergent Charging Controller, Prov IF, in versions 15.0.0.0.0 and 15.2.0.0.0. The vulnerability is exploitable with network access over HTTP by a high-privilege attacker and requires user interaction; successful exploitation could lead to takeover of...

CVE-2026-61137

...

CVE-2026-61136

Oracle Commerce Platform (Dynamo Application Framework) is affected in version 11.4.0. The vulnerability allows an unauthenticated attacker over HTTP to perform unauthorized updates, inserts/deletes, read access to data, and cause partial denial of service. CVSS v3.1 base score 7.3 (Confidentiali...

CVE-2026-61135

...

CVE-2026-61135

...

CVE-2026-61131

...

CVE-2026-61130

...

CVE-2026-61131

The CVE-2026-61131 entry maps to Oracle Commerce Platform (Dynamo Application Framework) with affected version 11.4.0. The vulnerability is exploitable over HTTP without authentication, enabling an attacker with network access to compromise and potentially takeover the Oracle Commerce Platform. T...

CVE-2026-61132

...

CVE-2026-61129

...

CVE-2026-61127

...

CVE-2026-61123

...

CVE-2026-61122

...

CVE-2026-61122

...

CVE-2026-61122

CVE-2026-61122 affects Oracle E-Business Suite, Oracle HRMS (UK) Payroll component, for versions 12.2.9–12.2.15. A low-privilege, network-authenticated attacker (HTTP) can compromise HRMS(UK), leading to unauthorized creation/deletion/modification of critical data or full access to HRMS(UK) data....

CVE-2026-61117

...

CVE-2026-61120

...

CVE-2026-61117

The CVE-2026-61117 entry concerns Oracle E-Business Suite, Oracle HRMS (UK) specifically, with affected versions 12.2.8–12.2.15. The vulnerability is described as exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK), with potential broader impact on ...

CVE-2026-61112

The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...