CVE-2026-61267

CVE-2026-61267 concerns the Oracle HCM Configuration Workbench (Oracle E-Business Suite) in the Spreadsheet Loading component. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP, enabling unauthorized u...

CVE-2026-61269

Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...

CVE-2026-61266

The vulnerability CVE-2026-61266 affects Oracle E-Business Suite, specifically the Oracle Supply Chain Globalization component Copy Inventory Organization. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged attacker with network access over HTTP to perform unauthorized update...

CVE-2026-61263

CVE-2026-61263 affects Oracle E-Business Suite, Oracle Scripting Admin, in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessing attacker over HTTP to gain unauthorized read and write access to Oracle Scripting data, with impact on confidentiality and integrity (CVS...

CVE-2026-61262

CVE-2026-61262 affects Oracle Teleservice within Oracle E-Business Suite, specifically the Service Diagnostics Scripts component. Affected versions are 12.2.3 through 12.215. The vulnerability allows an unauthenticated attacker with network access over HTTP to modify data (update/insert/delete) a...

CVE-2026-61264

CVE-2026-61264 affects Oracle E-Business Suite’s Oracle Call Center Technology (RDBMS and UI) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network attacker with HTTP access to cause unauthorized update/insert/delete and read access to Oracle Call Center Technology data (...

CVE-2026-61257

Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...

CVE-2026-61261

CVE-2026-61261 affects the Oracle Knowledge Management component (User Interface) of Oracle E-Business Suite, versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Knowledge Management, leading to unauthorized update/insert/delete and read access to ...

CVE-2026-61260

CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-61254

CVE-2026-61254 affects Oracle E-Business Suite Oracle HRMS (Korea) Korean Payroll, versions 12.2.3–12.2.15. The vulnerability is in the Korean Payroll component and can be exploited over HTTP by an unauthenticated attacker, with user interaction required, to read and modify a subset of Oracle HRM...

CVE-2026-61255

The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...

CVE-2026-61251

CVE-2026-61251 affects Oracle E-Business Suite HRMS (Australia) Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-adjacent attacker with HTTP access to compromise HRMS Australia, potentially exposing unauthorized data. The CVSS 3.1 base score is 6...

CVE-2026-61252

CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...

CVE-2026-61253

CVE-2026-61253 affects Oracle HRMS (Japanese) within Oracle E-Business Suite; impacted are Oracle Payroll Japanese in versions 12.2.3–12.2.15. The vulnerability allows unauthenticated, network-accessible exploitation via HTTPS and requires user interaction to trigger. Successful exploitation can ...

CVE-2026-61247

CVE-2026-61247 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be triggered by an unauthenticated attacker who can access via SMTP over the network, enabling unauthorized update/ins...

CVE-2026-61249

CVE-2026-61249 affects Oracle E-Business Suite Oracle Learning Management (component: Import And Export) in versions 12.2.3 through 12.2.15. The flaw enables a low-privileged, network-accessible attacker (via HTTP) to access Oracle Learning Management data, as described in the CVE details and NVD...

CVE-2026-61250

CVE-2026-61250 affects Oracle E-Business Suite Oracle Payroll (component: Payroll). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to Oracle Payroll data. CVSS 3.1 base sc...

CVE-2026-61244

The CVE concerns Oracle PeopleSoft Enterprise FIN Manufacturing Argentina (component: Manufacturing), affected in version 9.1. It describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion or modification of data, and unauthorized acc...

CVE-2026-61245

CVE-2026-61245 affects Oracle PeopleSoft Enterprise FIN Manufacturing Brazil (component: Integration) with version 9.1. An unauthenticated attacker over HTTPS could take over the system; CVSS 3.1 base 9.8. Exploitation details are not provided in the connected documents. Oracle's July 2026 Critic...

CVE-2026-61243

CVE-2026-61243 affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component: Staffing), with affected version 9.1. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and can lead to takeover of the system, per CVSS 3.1 base metrics (8.8, HI...

CVE-2026-61242

CVE-2026-61242 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Staffing), with the affected version reported as 9.1. The vulnerability enables a low-privileged, unauthenticated attacker (network access over HTTP) to compromise the target, potentially enabling takeover of People...

CVE-2026-61240

The CVE-2026-61240 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically the eSettlements component, with affected version 9.1. The vulnerability allows an unauthenticated attacker with access to the physical network segment attached to the hardware hosting People...

CVE-2026-61237

Summary: CVE-2026-61237 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Integration) with affected version 9.1. An unauthenticated, network-accessible attacker over HTTP can compromise data, gain unauthorized access to critical data, perform unauthorized updates/deletes, and ca...

CVE-2026-61239

CVE-2026-61239 : Vulnerability in Oracle PeopleSoft FIN Common Objects Argentina (component: eProcurement) affecting the 9.1 line. UNAUTHENTICATED attacker over HTTP can compromise data: create/delete/modify access to critical data, read subset, and cause partial DOS. CVSS 3.1 base score 9.9 (CRI...

CVE-2026-61238

The CVE-2026-61238 entry concerns Oracle PeopleSoft: FIN Common Objects Argentina, affected in the eProcurement component of PeopleSoft Enterprise FIN, version 9.1. The vulnerability is exploitable with network access over HTTP by an unauthenticated attacker, potentially leading to unauthorized c...

CVE-2026-61235

CVE-2026-61235 affects Oracle PeopleSoft: HCM Global Payroll Switzerland (component: Global Payroll for Switzerland) with affected version 9.2. The vulnerability is exploitable with network access via HTTP by a high-privileged attacker and can lead to takeover of the PeopleSoft Enterprise HCM Glo...

CVE-2026-61234

CVE-2026-61234 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: eProcurement), with affected version 9.1. Affected in unauthenticated, network-accessible via HTTP; impacts include unauthorized create/delete/modify of data and full data access (C/H I/H A:N). The root caus...

CVE-2026-61236

CVE-2026-61236 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil ( Staffing component) with affected version 9.1. The vulnerability allows an unauthenticated attacker over HTTP to access PeopleSoft data, potentially leading to unauthorized data access or full access to accessible dat...

CVE-2026-61226

Summary of CVE-2026-61226 (Oracle) : A vulnerability in Oracle Communications Converged Application Server, component RTP Proxy, affects version 8.3. The issue allows a high-privileged attacker who can log into the infrastructure running the server to compromise the application server, with poten...

CVE-2026-61233

CVE-2026-61233 affects Oracle PeopleSoft, specifically the FIN Common Objects Brazil product’s Integration component (version 9.1). The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise the system, with potential takeover of PeopleSoft Enterprise FIN Co...

CVE-2026-61232

CVE-2026-61232 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) with affected version 9.1. An unauthenticated attacker with network access via HTTP can compromise data. The provided documents do not specify a remediation or patch version.

CVE-2026-61225

Technical details for CVE-2026-61225 are not publicly available in the provided documents. No explicit exploitation data, impacted components beyond the initial description, or remediation steps are shown here. Monitor Oracle CPU July 2026 advisory for updates.

CVE-2026-61224

The CVE-2026-61224 entry concerns Oracle Communications Converged Application Server (component: Security) with affected version 8.3. The vulnerability enables a high-privilege attacker who has network access via TLS to compromise Disclosure: take over the Converged Application Server. CVSS 3.1 b...

CVE-2026-61223

CVE-2026-61223 concerns Oracle Communications Converged Application Server (Security component). Affected versions are 8.2 and 8.3. The issue is accessible without authentication over TCP/IP and, per the description, can lead to takeover of the Converged Application Server with high impact on con...

CVE-2026-61220

CVE-2026-61220 affects Oracle Banking Origination (Configuration) in Oracle Financial Services Applications, vulnerable in version 14.5.0.16.0. The flaw allows unauthenticated, network-accessible compromise via HTTP with user interaction required, potentially enabling unauthorized update/insert/d...

CVE-2026-61218

CVE-2026-61218 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine) and is exploitable on affected 12.2.3–12.2.15 installations. The vulnerability allows a low-privileged user with network access over HTTP to compromise the Secure Enterprise Search, pote...

CVE-2026-61221

This CVE concerns Oracle Item Master in Oracle E-Business Suite, affecting versions 12.2.3–12.2.15 (component: iSet‑up bugs). The vulnerability is exploitable by a low-privilege attacker with network access over HTTP, enabling unauthorized updates/inserts/deletes to some Oracle Item Master data a...

CVE-2026-61217

CVE-2026-61217 affects Oracle Fusion Middleware’s Oracle Security Service, specifically the Oracle SSL API component, with affected version 12.2.1.4.0. The vulnerability is exploitable by a low-privileged attacker who has network access via TLS and requires user interaction. Impact includes unaut...

CVE-2026-61216

CVE-2026-61216 concerns Oracle E-Business Suite, Oracle Payroll component (Payroll). Affected are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to Oracle Payroll, potentially enabling unauthorized update/insert/delete and unauthorize...

CVE-2026-61214

This CVE (CVE-2026-61214) concerns Oracle HRMS (UK) within Oracle E-Business Suite, specifically the UK Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK) and read a subset of data, per CV...

CVE-2026-61210

CVE-2026-61210 affects Oracle PeopleSoft Enterprise SCM Manufacturing (component: Security) for the 9.2 release. The vulnerability is exploitable over HTTPS with network access and requires no authentication, enabling an attacker to perform unauthorized creation, deletion, or modification of data...

CVE-2026-61211

Oracle Database Server’s RDBMS component contains CVE-2026-61211 affecting 19.3–19.31 and 23.4.0–23.26.2. A low-privileged attacker with Execute DBMS_CLOUD and network access via Oracle Net can compromise the RDBMS, potentially taking over the system. Patching guidance is included in the Oracle J...

CVE-2026-61209

Technical details are not publicly available in the provided documents. Monitor Oracle CPU July 2026 advisory and NVD entry for affected versions, impact, and fixes.

CVE-2026-61205

CVE-2026-61205 affects Oracle PeopleSoft 9.2 SCM Purchasing (component: Purchasing). The vulnerability allows an unauthenticated attacker over HTTP to compromise PeopleSoft SCM Purchasing, enabling unauthorized creation, deletion or modification of data, and unauthorized read access to a subset o...

CVE-2026-61207

Vulnerability CVE-2026-61207 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. An unauthenticated attacker with network access via HTTP can compromise the SCM eProcurement, with potential scope impact to additional products and outcomes i...

CVE-2026-61204

CVE-2026-61204 affects Oracle PeopleSoft Enterprise FIN Program Management (component: Primavera Integration) with affected version 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the FIN Program Management module, requiring user interaction, and...

CVE-2026-61203

CVE-2026-61203 concerns Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses). The affected product/version is PeopleSoft FIN Expenses 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, enabling unauthorized creation/modification/deletion of data and...

CVE-2026-61202

CVE-2026-61202 affects Oracle Solaris (Utility) with targeted impact on versions 11.3 and 11.4. The vulnerability is exploitable by a low-privilege user who can log on to the infrastructure where Oracle Solaris runs, resulting in compromised Solaris and potential scope expansion to other products...

CVE-2026-61201

CVE-2026-61201 affects Oracle PeopleSoft: PeopleSoft Enterprise CRM Common Objects (component: Common Objects) in version 9.2.23. An unauthenticated attacker with network access via HTTP can compromise the Common Objects, with potential impact across related products (scope change) and possible t...