CVE-2026-62557

CVE-2026-62557 affects Oracle E-Business Suite – Oracle HRMS (UK) with UK Payroll component, vulnerable in supported versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access over HTTP to compromise HRMS (UK), potentially leading to unauthorized access to confidential ...

CVE-2026-62556

The CVE-2026-62556 affects Oracle HRMS (US) within Oracle E-Business Suite, specifically the Internal Operations component, for versions 12.2.6–12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP with network access, potentially granting unauthorized access to Oracl...

CVE-2026-62549

CVE-2026-62549 is a vulnerability in the Oracle HRMS (UK) component of Oracle E-Business Suite, affecting versions 12.2.3–12.2.15. The flaw allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle HRMS (UK), potentially leading to unauthorized creation, deletion, or mo...

CVE-2026-62548

The CVE-2026-62548 vulnerability affects the Oracle HRMS (US) component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (US), with potential takeover (as state...

CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2026-62542

CVE-2026-62542 affects Oracle E-Business Suite, Oracle Advanced Benefits (Self Service Benefits) with vulnerable versions 12.2.3–12.2.15. The vulnerability allows a network-based, low-privilege attacker over HTTP to read, update/insert/delete data and cause partial denial of service in Oracle Adv...

CVE-2026-62534

CVE-2026-62534 affects Oracle E-Business Suite’s Oracle Applications Framework via the Web Utilities component. Affected versions are 12.2.11–12.2.15. The vulnerability is exploitable over HTTP with low privileges from the network and can lead to takeover of the Oracle Applications Framework. CVS...

CVE-2026-62546

CVE-2026-62546 affects Oracle E-Business Suite Oracle Applications Framework Web Utilities, with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privilege attacker with network access via HTTP to compromise OAF, potentially taking over the Oracle Applications Framework. CVSS 3.1 base...

CVE-2026-62527

The CVE-2026-62527 entry concerns Oracle E-Business Suite’s Oracle Learning Management, component Import And Export. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over the network via HTTP, enabling unauthorized update/insert/delete an...

CVE-2026-62530

Technical details about CVE-2026-62530 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62528

CVE-2026-62528 affects Oracle E-Business Suite’s Oracle HCM Configuration Workbench (Install) with affected versions 12.2.3–12.2.15. A low-privilege, unauthenticated/ network-accessible attacker (via HTTP) can exploit this vulnerability to achieve unauthorized update/insert/delete access and read...

CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...

CVE-2026-62521

The CVE-2026-62521 entry concerns Oracle E-Business Suite, Oracle HRMS (US) Payroll General. Affected products/versions are Oracle E-Business Suite 12.2.7–12.2.15. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (US), potentially leadin...

CVE-2026-62525

CVE-2026-62525 describes a vulnerability in the Oracle Quality component of Oracle E-Business Suite (Quality Workbench HTML system). Affected are supported Oracle E-Business Suite 12.2.3–12.2.15. The issue can be exploited by a low-privilege, unauthenticated attacker over HTTP to perform unauthor...

CVE-2026-62519

CVE-2026-62519 affects Oracle E-Business Suite’s Succession Planning (Succession plan) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Succession planning component, potentially enabling unauthorized update/i...

CVE-2026-62518

Affected product: Oracle E-Business Suite — Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. Vulnerability details: Low-privilege, network-access attacker (via HTTP) can compromise Oracle Production Scheduling, with potential unauthorized create/delete/modify of data, unaut...

CVE-2026-62514

The CVE affects Oracle E-Business Suite – Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise the product, potentially leading to ...

CVE-2026-62517

The CVE-2026-62517 entry concerns the Oracle E-Business Suite Oracle Production Scheduling product (Internal Operations component). Affected are versions 12.2.3 through 12.2.15. The flaw is described as unauthenticated-over-network via HTTP with user interaction required, potentially allowing acc...

CVE-2026-62515

CVE-2026-62515 affects Oracle E-Business Suite’s Oracle Advanced Planning Command Center (Internal Operations) with affected versions 12.2.3–12.2.15. The CVSS 3.1 base score is 7.6 (Confidentiality and Integrity impacts). The vulnerability is exploitable over HTTP with network access by a high-pr...

CVE-2026-62516

CVE-2026-62516 affects Oracle Demantra Demand Management within Oracle Supply Chain Security (Product Security). Affected are versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated attacker with network access (via SQL) to compromise the Demantra system, with potential...

CVE-2026-62513

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Regulatory Management product (Internal Operations). Affected are 12.2.3–12.2.15. The flaw can be exploited by a low-privilege attacker with network access via HTTP to gain unauthorized access to data or perfor...

CVE-2026-62507

CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...

CVE-2026-62508

CVE-2026-62508 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The flaw can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracle Time and Labor. The CVSS 3.1 base score is 3.1...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62505

CVE-2026-62505 affects Oracle Time and Labor, a component of Oracle E-Business Suite, with impacted versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker able to reach Oracle Time and Labor over HTTP to compromise data, with the attack requiring human interaction. Potentia...

CVE-2026-62503

CVE-2026-62503 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). The vulnerability involves the Internal Operations component and is exploitable by a high-privilege attacker over HTTP with network access, enabling unauthorized create/delete/modify of data and partial deni...

CVE-2026-62498

CVE-2026-62498 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.7–12.2.15. The vulnerability is exploitable over HTTP with a network access from a low-privileged attacker and can lead to takeover of Oracle Flow Manufacturing, per initial and NVD descriptions. The CVSS ...

CVE-2026-62497

CVE-2026-62497 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.13–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Flow Manufacturing, potentially leading to unauthorized creation, deletion, or modificati...

CVE-2026-62496

CVE-2026-62496 affects Oracle Yard Management within Oracle E-Business Suite (Internal Operations) for EBS versions 12.2.6–12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged user and can lead to takeover of Oracle Yard Management (CVSS 3.1 base score 8.8)....

CVE-2026-62494

The CVE-2026-62494 entry affects Oracle Time and Labor in Oracle E-Business Suite, specifically the Internal Operations component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized creatio...

CVE-2026-62493

CVE-2026-62493 affects Oracle E-Business Suite – Oracle Purchasing (Internal Operations). Affected versions are 12.2.11–12.2.15. The vulnerability is exploitable by a low-privilege user with network access over HTTP and can lead to takeover of Oracle Purchasing. CVSS v3.1 base score is 7.5 (Impac...

CVE-2026-62495

CVE-2026-62495 concerns Oracle E-Business Suite (Process Manufacturing → Process Execution) vulnerable in 12.2.15. The flaw allegedly enables a low-privileged, network-accessing attacker (via HTTP) to take over the Oracle Process Manufacturing Process Execution, with impact on confidentiality, in...

CVE-2026-62488

CVE-2026-62488 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). In affected releases 12.2.3–12.2.15, a low-privilege, network-accessible attacker via HTTP can compromise Oracle Contracts Integration, leading to unauthorized creation, deletion or modification of...

CVE-2026-62490

CVE-2026-62490 affects Oracle E-Business Suite Oracle Contracts Integration (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access to compromise the Oracle Contracts Integration and potentially gain access to...

CVE-2026-62489

CVE-2026-62489 is a vulnerability in Oracle E-Business Suite – Oracle Contracts Integration (Internal Operations). Affected are 12.2.3–12.2.15. The issue allows a low-privilege attacker who can access the product over HTTP to perform unauthorized updates, inserts or deletes, and to read data with...

CVE-2026-62484

CVE-2026-62484 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). Supported affected versions: 12.2.3–12.2.15. The vulnerability, with CVSSv3.1 base score 5.9 (Integrity), can be exploited by an unauthenticated, network-accessible attacker over HTTP to cause unau...

CVE-2026-62487

CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...

CVE-2026-62486

CVE-2026-62486 affects Oracle Contracts Integration in Oracle E-Business Suite (component: Internal Operations) for supported 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Contracts Integration. Successful attacks require h...

CVE-2026-62483

The CVE-2026-62483 entry concerns Oracle E-Business Suite, specifically the Project Contracts product (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, leading to possible unauthorized u...

CVE-2026-62480

The CVE-2026-62480 entry covers a vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite), specifically the Internal Operations component. Affected are versions 12.2.3 through 12.2.15. The description states that a low-privileged attacker with network access over HTTP can compr...

CVE-2026-62482

CVE-2026-62482 affects Oracle E-Business Suite – Oracle Public Sector Financials, Internal Operations component. Affected versions: 12.2.3 through 12.2.15. An attacker with network access over HTTP and low privileges can compromise data through unauthorized update/insert/delete and unauthorized r...

CVE-2026-62479

CVE-2026-62479 affects Oracle E-Business Suite, Oracle Public Sector Financials (Internal Operations) in the 12.2.3–12.2.15 range. The vulnerability is exploitable remotely over HTTP by a low-privilege attacker and requires user interaction. Successful attacks could lead to unauthorized update/in...

CVE-2026-62476

CVE-2026-62476 affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue is described as easily exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover of Oracle Public Sect...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62474

CVE-2026-62474 is a vulnerability in Oracle E-Business Suite’s Oracle Lease and Finance Management product, specifically the Lease Authoring component. Affected versions are 12.2.3 through 12.2.15. The issue allows a low-privileged attacker with network access via HTTP to compromise the applicati...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62473

CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...

CVE-2026-62469

The CVE-2026-62469 entry concerns Oracle E-Business Suite, Oracle Human Resources product (Enterprise Command Center) affecting 12.2.14–12.2.15. The vulnerability permits a low-privilege user with logon to the infrastructure running Oracle Human Resources to compromise the application, enabling u...

CVE-2026-62468

CVE-2026-62468 affects Oracle E-Business Suite HR (Enterprise Command Center) with affected versions 12.2.14–12.2.15. The vulnerability is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation/modification/deletion of data or unauthorized data acce...

CVE-2026-62470

CVE-2026-62470 affects Oracle E-Business Suite’s Oracle Self-Service Human Resources, specifically the Manager Self-Service component, with affected versions 12.2.3–12.2.15. The vulnerability arises in this product’s Self-Service HR area and is exploitable over the network via HTTP by a low-privi...