CVE-2026-61047

CVE-2026-61047 affects Oracle E-Business Suite’s Oracle Production Scheduling (Internal Operations). Affected versions are 12.2.3–12.2.15. The flaw allows a high-privileged attacker with local access to that infrastructure to compromise Oracle Production Scheduling, potentially enabling unauthori...

CVE-2026-61048

CVE-2026-61048 targets Oracle Inventory Optimization (Oracle E-Business Suite), component: User Interface. Affected are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Inventory Optimization, potentially causing a partial denial o...

CVE-2026-61046

CVE-2026-61046 affects Oracle E-Business Suite, Oracle Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. The issue is exploitable by a high-privilege attacker with network access via HTTP to compromise Oracle Production Scheduling, with potential scope expansion impacting re...

CVE-2026-61044

The CVE-2026-61044 entry concerns Oracle E-Business Suite’s Production Scheduling (Internal Operations) with affected 12.2.3–12.2.15. An attacker with network access via HTTP and high privileges can potentially modify or delete data, read subset data, and cause partial denial of service in Oracle...

CVE-2026-61043

CVE-2026-61043 affects Oracle E-Business Suite Oracle Production Scheduling (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable locally: low privileges, user interaction required, and could lead to unauthorized creation/deletion/modification of data or un...

CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61036

This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...

CVE-2026-61030

Summary: CVE-2026-61030 affects Oracle E-Business Suite – Process Manufacturing Product Development (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation...

CVE-2026-61035

CVE-2026-61035 affects Oracle E-Business Suite – Oracle Financials for the Americas (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker, with network access via HTTP, to compromise Oracle Financials for the Americas, potentially taking ...

CVE-2026-61031

CVE-2026-61031 affects Oracle E-Business Suite Oracle Financials Common Country (Internal Operations) in versions 12.2.3–12.2.15. A low-privilege, network-access via HTTP attacker can compromise data, potentially creating/deleting/modifying critical data or gaining complete access to Oracle Finan...

CVE-2026-61028

CVE-2026-61028 affects Oracle E-Business Suite Inventory Management (Internal Operations) and is limited to versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege user with logon to the executing infrastructure and can lead to partial denial of service of Oracle Inventory M...

CVE-2026-61025

CVE-2026-61025 affects Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) for supported versions 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise Oracle iRecruitment, potentially leading to takeover of ...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61026

CVE-2026-61026 affects Oracle iRecruitment within Oracle E-Business Suite, specifically versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized access to critical data or full access to Oracle iRecruitment...

CVE-2026-61024

CVE-2026-61024 affects Oracle E-Business Suite’s iRecruitment (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-adjacent attacker (HTTP) to compromise iRecruitment, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61020

CVE-2026-61020 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) on versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over network access via HTTP, potentially leading to unauthorized creation, deletion or modification of d...

CVE-2026-61023

CVE-2026-61023 affects Oracle Inventory Management (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability enables a high-privilege local attacker with logon to the infrastructure where Oracle Inventory Management runs to compromise the component, potentially ...

CVE-2026-61015

Oracle E-Business Suite Time and Labor (Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-61015 vulnerability can be exploited remotely without authentication over HTTP to read a subset of data. CVSS v3.1 base score is 3.7 (Low) with Confidentiality impact=Low; other impac...

CVE-2026-61014

CVE-2026-61014 affects Oracle Inventory Management in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, targeting Oracle Inventory Management and potentially i...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61012

Affected product/loc : Oracle Time and Labor, Oracle E-Business Suite; affected versions 12.2.3–12.2.15. Vulnerability : Internal Operations component vulnerable to exploitation via HTTP by a low-privilege, network-accessing attacker, enabling unauthorized create/delete/modify of data or partial ...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-61010

Oracle E-Business Suite’s Oracle Process Manufacturing Systems (Internal Operations) is affected in versions 12.2.3–12.2.15. The vulnerability allows a network-accessible, low-privileged attacker (via HTTP) to compromise the system, potentially leading to complete takeover (CVSS 3.1 base score 8....

CVE-2026-61005

CVE-2026-61005 concerns Oracle E-Business Suite Oracle Process Manufacturing Logistics (Internal Operations) across affected AppServer versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, potentia...

CVE-2026-61009

CVE-2026-61009 concerns Oracle E-Business Suite’s Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The published description states a vulnerability that an attacker with high privileges can exploit over the network via HTTP to compromise Oracle P...

CVE-2026-61006

The CVE-2026-61006 affects Oracle E-Business Suite, Oracle Process Manufacturing Logistics (Internal Operations), with affected versions 12.2.3–12.2.15. The issue enables a high-privilege attacker who can reach the service over HTTP to take control of Oracle Process Manufacturing Logistics, per C...

CVE-2026-60999

CVE-2026-60999 affects Oracle Data Integrator (part of Oracle Fusion Middleware) with REST service in version 14.1.2.0.0. The vulnerability is exploitable over HTTPS by an unauthenticated network attacker, potentially leading to takeover of Oracle Data Integrator. The CVSS 3.1 base score is 9.8 (...

CVE-2026-61000

CVE-2026-61000 affects Oracle Process Manufacturing Systems within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3 through 12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially leading to unauthorized...

CVE-2026-61004

The CVE-2026-61004 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Landed Cost Management (Internal Operations) affecting versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Landed Cost Management, potentially enabling un...

CVE-2026-60997

CVE-2026-60997 affects Oracle E-Business Suite Oracle Universal Work Queue (Non-Media Integration issues). Affects 12.2.3–12.2.15; reachable over HTTP with network access. Low-privileged attacker can compromise data secrecy and integrity (unauthorized create/delete/modify) for Oracle Universal Wo...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60986

CVE-2026-60986 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations). Affected versions are 12.2.3–12.2.15. A low-privilege, network-accessible attacker (via HTTP) can modify or access critical data, per the description. The CVSS v3.1 base score is 8.1 (High) wi...

CVE-2026-60987

CVE-2026-60987 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the affected project portfolio analysis component, potentially causin...

CVE-2026-60985

CVE-2026-60985 affects Oracle Project Portfolio Analysis (Oracle E-Business Suite) in the Internal Operations component for Oracle E-Business Suite versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the product, potentially enab...

CVE-2026-60982

CVE-2026-60982 affects Oracle E-Business Suite US Federal Human Resources (component: Internal Operations). Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable with network access via HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or m...

CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...

CVE-2026-60974

The CVE-2026-60974 entry corresponds to a vulnerability in the Oracle E-Business Tax component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged attacker who can access over HTTP, potentially leading to una...

CVE-2026-60978

CVE-2026-60978 affects Oracle Scripting (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Scripting, potentially enabling unauthorized creation, deletion, or modification...

CVE-2026-60973

Oracle E-Business Tax in Oracle E-Business Suite (Internal Operations) is affected for versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege user who can log on to the infrastructure where Oracle E-Business Tax runs, potentially leading to takeover of Oracle E-Business Ta...

CVE-2026-60972

The CVE-2026-60972 entry concerns Oracle E-Business Tax within Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15 for the Internal Operations component. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to unauthorized crea...

CVE-2026-60965

CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...

CVE-2026-60966

CVE-2026-60966 affects Oracle E-Business Suite’s Oracle Public Sector Human Resources (component: Regression Testing). Affected are 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access and can lead to unauthorized creation, deletion or modific...

CVE-2026-60963

CVE-2026-60963 affects Oracle Treasury (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The issue is actionable via network access over HTTP by a low-privilege user, leading to unauthorized creation, deletion, or modification of critical Oracle Treasury data, or full acc...

CVE-2026-60960

CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...

CVE-2026-60959

CVE-2026-60959 : Vulnerability in Oracle SDP Number Portability (Oracle E-Business Suite, Internal Operations). Affected: 12.2.3–12.2.15. Low-privilege, network-access attacker (via HTTP) can compromise data: unauthorized create/delete/modify of critical data or full access to all data. CVSS v3.1...

CVE-2026-60962

CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...