CVE-2026-60953

Oracle CVE-2026-60953 affects the Oracle Telecommunications Billing Integrator component of Oracle E-Business Suite, versions 12.2.3–12.2.15. It is exploitable over HTTP by a low-privilege, network-accessible attacker, potentially causing unauthorized creation/deletion/modification of data or bro...

CVE-2026-60957

CVE-2026-60957 affects Oracle Transportation Execution in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged, network-accessible attacker via HTTP and requires user interaction; it can lead to unauthorized upda...

CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...

CVE-2026-60948

CVE-2026-60948 affects Oracle Learning Management, part of Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle Learning Management, potentially causing unauthorized creation, deletion,...

CVE-2026-60952

CVE-2026-60952 affects Oracle Transportation Execution within Oracle E-Business Suite (component: Internal Operations). Affects supported versions 12.2.3–12.2.15. An attacker with low privileges on the network can exploit HTTP access to compromise Oracle Transportation Execution, potentially taki...

CVE-2026-60945

CVE-2026-60945 affects Oracle E-Business Suite’s Oracle Learning Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker who can access over HTTP to compromise Oracle Learning Management, requiring user interaction. Impact include...

CVE-2026-60942

The CVE-2026-60942 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine) in versions 12.2.3–12.2.15. It enables a low-privileged, network-authenticated attacker (HTTP) to potentially create/modify/delete critical data or access all data via the Fulfillment Mana...

CVE-2026-60943

The CVE-2026-60943 affects Oracle E-Business Suite, specifically the Oracle Service Fulfillment Manager component (Fulfillment Engine) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to take over the Oracle Service Fulfillme...

CVE-2026-60939

The CVE-2026-60939 entry concerns Oracle E-Business Suite’s Oracle Project Contracts (Internal Operations). Affects versions 12.2.3–12.2.15; a low-privileged user with network access via HTTP can access unauthorized data read from Oracle Project Contracts. CVSS 3.1 base score is 3.1 (Confidential...

CVE-2026-60941

Summary: CVE-2026-60941 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine). Affected versions are 12.2.3–12.2.15. The flaw is exploitable over a network via HTTP by a user with high privileges, enabling unauthorized creation, deletion or modification of crit...

CVE-2026-60940

CVE-2026-60940 affects Oracle E-Business Suite, Oracle Service Contracts (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a high-privileged attacker with network access via HTTP and requires user interaction. Impact: unauthorized creation, deletion,...

CVE-2026-60938

CVE-2026-60938 affects Oracle Labor Distribution (Internal Operations) in Oracle E-Business Suite, Versions 12.2.3–12.2.15. The root cause is not explicitly described beyond the vulnerable surface; the flaw can allow a high-privilege attacker with local logon to compromise Oracle Labor Distributi...

CVE-2026-60936

The CVE-2026-60936 entry concerns Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected releases 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who can access over HTTP, potentially causing partial denial of service to Oracle Labor...

CVE-2026-60937

CVE-2026-60937 affects Oracle E-Business Suite Labor Distribution, Internal Operations component. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletions on Oracle Lab...

CVE-2026-60932

CVE-2026-60932 affects Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privilege, network-accessing attacker over HTTP to compromise Oracle Labor Distribution, potentially leading to takeover and impa...

CVE-2026-60931

The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...

CVE-2026-60927

CVE-2026-60927 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected: Oracle Public Sector Financials on 12.2.3–12.2.15. The issue can be exploited by a low-privileged user with network access via HTTP to take over the product. CVSS v3.1 base score 7.5 (C:H, I:H...

CVE-2026-60929

Oracle E-Business Suite Public Sector Financials (Internal Operations) versions 12.2.3–12.2.15 are affected by CVE-2026-60929. The vulnerability allows a low-privilege, unauthenticated or network-accessible attacker over HTTP to modify accessible data (update/insert/delete) in Oracle Public Secto...

CVE-2026-60930

CVE-2026-60930 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to read a subset of Oracle Public Sector Financials data. Root ...

CVE-2026-60926

The CVE-2026-60926 entry affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker who can access over HTTP to compromise the Public Sector Payroll, potentially taking over the s...

CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60925

CVE-2026-60925 affects Oracle E-Business Suite, Oracle Public Sector Payroll (Internal Operations) versions 12.2.4–12.2.15. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise the Oracle Public Sector Payroll component, potentially taking over the payrol...

CVE-2026-60920

The CVE-2026-60920 entry affects Oracle E-Business Suite, Oracle Customer Care (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Customer Care. The CVSS 3.1 base ...

CVE-2026-60922

The CVE-2026-60922 entry concerns Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations). Affected: 12.2.3–12.2.15. The issue is exploitable by a low-privilege actor with network access over HTTP and can lead to unauthorized read access of a subset of iSupplier Portal data. The C...

CVE-2026-60923

CVE-2026-60923 affects Oracle Capacity (Internal Operations) in Oracle E-Business Suite, version 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with HTTP network access to compromise Oracle Capacity, potentially leading to unauthorized access to critical data or all data withi...

CVE-2026-60917

CVE-2026-60917 affects Oracle Inventory Management in Oracle E-Business Suite Core Receiving for versions 12.2.3–12.2.15. The vulnerability is exploitable with network access over HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of data, or complet...

CVE-2026-60919

CVE-2026-60919 affects Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations) for the 12.2.3–12.2.15 range. The vulnerability allows an unauthenticated network attacker with HTTP access to bypass authentication and gain unauthorized read access to a subset of iSupplier Portal dat...

CVE-2026-60918

CVE-2026-60918 concerns Oracle E-Business Suite’s Shipping Execution (component: Internal Operations). Affected are Oracle E-Business Suite versions 12.2.12 through 12.2.15. The vulnerability enables a high-privilege attacker who can access the system over HTTP to compromise Oracle Shipping Execu...

CVE-2026-60911

CVE-2026-60911 affects Oracle Property Manager within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability resides in the Property Manager component (Internal Operations) and is exploitable by a low-privileged user over HTTP with network access; user interaction is required. Impact...

CVE-2026-60913

Vulnerability CVE-2026-60913 affects Oracle E-Business Suite, Oracle Property Manager (Internal Operations) in versions 12.2.3–12.2.15. A high-privileged attacker with local access can compromise the Property Manager and gain unauthorized read access to a subset of its data. CVSSv3.1 base score i...

CVE-2026-60912

Summary of CVE-2026-60912 (Oracle E-Business Suite - Oracle Property Manager) Vulnerability affects Oracle Property Manager (Internal Operations) within Oracle E-Business Suite, impacting supported versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise...

CVE-2026-60908

CVE-2026-60908 concerns Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially lead to unauthorized access to critica...

CVE-2026-60907

The CVE-2026-60907 entry concerns Oracle E-Business Suite, Oracle Installed Base, component: Create Item Instance. Affected versions are 12.2.4–12.2.15. The issue is exploitable with network access via HTTP by a low-privilege attacker, leading to unauthorized update/insert/delete of Oracle Instal...

CVE-2026-60910

This CVE concerns Oracle Property Manager in Oracle E-Business Suite (Internal Operations). Affected are supported 12.2.3–12.2.15 releases. The vulnerability is exploitable by a high-privilege attacker over HTTP network access and can lead to takeover of Oracle Property Manager, per CVSS 3.1 Base...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60904

The CVE-2026-60904 entry applies to Oracle E-Business Suite, Oracle Installed Base product, component Create Item Instance. Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable over the network via HTTP by a low-privileged attacker, potentially leading to unauthorized creati...

CVE-2026-60900

CVE-2026-60900 affects Oracle E-Business Suite’s HCM Configuration Workbench (Rapid Implementation) . Affected versions: 12.2.3–12.2.15 . The vulnerability can be exploited by a high-privilege attacker with network access via HTTP to gain takeover of the HCM Configuration Workbench. CVSS v3.1 bas...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...

CVE-2026-60897

CVE-2026-60897 affects Oracle E-Business Suite Payroll (Internal Operations component). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Payroll, potentially takeover of the payroll component. Base CVSS 3.1 ...

CVE-2026-60899

CVE-2026-60899 affects Oracle E-Business Suite’s Oracle HCM Configuration Workbench (Rapid Implementation) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged network attacker (HTTP) to access Oracle HCM Configuration Workbench data, with impact limited to confidentia...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...

CVE-2026-60893

The CVE-2026-60893 entry affects Oracle E-Business Suite, Oracle Payroll (Internal Operations) for versions 12.2.3–12.2.15. The issue is a local, low-privilege vulnerability that can allow compromise of Oracle Payroll; broader impact on related products is possible. CVSS v3.1 base score is 6.5 (C...

CVE-2026-60894

CVE-2026-60894 affects Oracle E-Business Suite’s Oracle Payroll (Internal Operations) for EBS versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Payroll, potentially leading to takeover of the payroll component. The CVSSv3...

CVE-2026-60891

CVE-2026-60891 affects Oracle Work in Process (Internal Operations) in Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker who has a logon to the infrastructure where Oracle WIP runs, potentially enabling unauthorized read...

CVE-2026-60892

CVE-2026-60892 affects Oracle E-Business Suite HRMS Norway (Norway Payroll) with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privileged attacker with network access over HTTP to compromise Oracle HRMS Norway, potentially taking over the system. CVSSv3.1 base score is 6.6 (C/H/I/A...

CVE-2026-60890

CVE-2026-60890 is a vulnerability in Oracle E-Business Suite’s Oracle Payroll (Internal Operations) affecting 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Payroll, potentially taking over the service. The description and scores are provided by ...

CVE-2026-60886

CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...

CVE-2026-60888

CVE-2026-60888 : In Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations) on affected 12.2.3–12.2.15 versions is vulnerable. The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Work in Process, with potential unauthorized acces...

CVE-2026-60877

The CVE-2026-60877 entry concerns Oracle E-Business Suite, Oracle Trade Management, component Claim LOV, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Trade Management, potentially enabling unauthorized cr...