CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-60859

CVE-2026-60859 affects Oracle E-Business Suite — Oracle Quoting (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Quoting and potentially takeover the component. The CVSS v3.1 base score is 7.5 (...

CVE-2026-60857

The CVE-2026-60857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration product (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw is exploitable by a low-privilege attacker with network access over HTTP, potentially leading t...

CVE-2026-60863

CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...

CVE-2026-60854

CVE-2026-60854 affects Oracle E-Business Suite, Oracle Quality (Internal Operations) with affected 12.2.3–12.2.15. The vulnerability allows network access via HTTP by a high-privilege attacker to compromise Oracle Quality, potentially accessing all Oracle Quality data, performing unauthorized upd...

CVE-2026-60852

CVE-2026-60852 affects Oracle E-Business Suite Oracle Lease and Finance Management (Internal Operations). Supported affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially creating, deleting, or...

CVE-2026-60855

CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...

CVE-2026-60847

CVE-2026-60847 describes a vulnerability in Oracle E-Business Suite, Oracle Order Entry (Internal Operations) affecting 12.2.3–12.2.15. An attacker with high privileges and local logon could compromise Order Entry, potentially enabling unauthorized update/insert/delete of accessible data and part...

CVE-2026-60848

Oracle E-Business Suite CVE-2026-60848 affects the Oracle Project Contracts component (Internal Operations) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privileged, unauthenticated attacker with network access over HTTP to compromise Oracle Project Contracts, potentially al...

CVE-2026-60846

CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...

CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60843

CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...

CVE-2026-60845

CVE-2026-60845 concerns Oracle E-Business Suite’s Oracle Mobile Application Server (MWA General Bugs). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a high-privilege attacker over HTTP to compromise Oracle Mobile Application Server, potentially leading to takeover. C...

CVE-2026-60842

CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...

CVE-2026-60838

CVE-2026-60838 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) with affected versions 12.2.3–12.2.15. The CVE describes an easily exploitable vulnerability where a low-privilege, network-accessing attacker via HTTP can compromise Oracle Price Protection, potentially...

CVE-2026-60840

The vulnerability CVE-2026-60840 affects Oracle Demand Signal Repository (ODEC) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged attacker with network access via SQL to compromise the repository, potentially leading to unauthorized creation,...

CVE-2026-60837

CVE-2026-60837 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) in 12.2.3–12.2.15. A low-privilege user with local logon can compromise Oracle Price Protection, with potential unauthorized creation/deletion/modification of critical data and broader access to Oracle P...

CVE-2026-60836

CVE-2026-60836 affects Oracle E-Business Suite, Oracle HCM Common Architecture (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Oracle HCM Common Architecture, with impacts to confidentiality, in...

CVE-2026-60833

Vulnerability CVE-2026-60833 affects Oracle Solaris 11.4 (Utility component). A low-privilege, local attacker with logon can exploit the flaw to compromise Oracle Solaris, potentially leading to system takeover. CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availability). Techn...

CVE-2026-60835

CVE-2026-60835 affects Oracle E-Business Suite Price Protection (Internal Operations) in versions 12.2.3–12.2.15. The flaw allows a low-privileged attacker over HTTP with network access to compromise Oracle Price Protection, risking unauthorized access to sensitive data. Affected product: Oracle ...

CVE-2026-60834

CVE-2026-60834 affects Oracle Solaris 11.4 (Utility component). The issue allows a low-privileged, network-accessible attacker via RAD to gain unauthorized access to data and potentially modify data due to a confidentiality/integrity impact (CVSS 7.1, HIGH). The root cause is not explicitly descr...

CVE-2026-60828

CVE-2026-60828 affects Oracle Interaction Blending within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The flaw lets a high-privilege attacker with network access over HTTP compromise Oracle Interaction Blending, potentially resulting in takeover and impact...

CVE-2026-60829

CVE-2026-60829 affects Oracle E-Business Suite, Oracle Advanced Outbound Telephony (Internal Operations). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise the component, potentially taking over Oracle Advanced Outbound Telephony (CVSS 8.8, high ...

CVE-2026-60832

CVE-2026-60832 affects Oracle Interaction Blending (Oracle E-Business Suite, Internal Operations) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker over a network via RMI, potentially allowing unauthorized update/insert/delete and read access to Oracle In...

CVE-2026-60826

CVE-2026-60826 describes a vulnerability in Oracle iSupport (Oracle E-Business Suite, Internal Operations) affecting EBS versions 12.2.3–12.2.15. A high-privilege attacker with network access via HTTP can compromise Oracle iSupport, potentially taking over the service. The CVSS v3.1 base score is...

CVE-2026-60825

CVE-2026-60825 affects Oracle iSupport within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access and can lead to takeover of Oracle iSupport. CVSS 3.1 base ...

CVE-2026-60827

CVE-2026-60827 affects Oracle iSupport (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport; successful attacks require user interaction and can lead to unauthoriz...

CVE-2026-60823

CVE-2026-60823 affects Oracle iSupport (Oracle E-Business Suite Internal Operations) with affected 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access, leading to unauthorized create/delete/modify access to Oracle iSupport data or comple...

CVE-2026-60824

CVE-2026-60824 affects Oracle E-Business Suite’s Oracle iSupport (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged, network-adjacent attacker with HTTP access to compromise iSupport, with potential unauthorized access to all Oracle iSupport...

CVE-2026-60817

CVE-2026-60817 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise iStore, potentially leading to unauthorized creation, deletion or modification of data, or unaut...

CVE-2026-60813

CVE-2026-60813 affects Oracle E-Business Suite iStore Shopping Cart component; affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to takeover Oracle iStore. CVSS v3.1 base score 7.2 (C/H/I/A). No exploitation details provided beyond t...

CVE-2026-60816

CVE-2026-60816 affects Oracle iStore (Oracle E-Business Suite, Shopping Cart) in versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access via HTTP to compromise iStore and may lead to unauthorized access to critical data or all accessible iStore data. Base score 5.3 (...

CVE-2026-60815

CVE-2026-60815 affects Oracle iStore (Shopping Cart) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by an unauthenticated network user and requires user interaction. It can lead to unauthorized update/insert/delete and read access to Oracle iStore ...

CVE-2026-60811

CVE-2026-60811 affects Oracle E-Business Suite’s Oracle Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to perform unauthorized updates/insertions/deletions and to read ...

CVE-2026-60810

CVE-2026-60810 affects Oracle E-Business Suite – Supply Chain Trading Connector (component: Collaboration History) in versions 12.2.3–12.2.15. An unauthenticated, network-accessible over HTTP attacker can potentially access or modify data within Oracle Supply Chain Trading Connector with Confiden...

CVE-2026-60812

CVE-2026-60812 affects Oracle E-Business Suite’s Supply Chain Trading Connector (Collaboration History), with affected versions 12.2.3–12.2.15. The vulnerability is network-exploitable via HTTP by a low-privileged user and can lead to unauthorized access to data; CVSS v3.1 base score 6.5 (Confide...

CVE-2026-60806

CVE-2026-60806 is a vulnerability in Oracle Cost Management (Oracle E-Business Suite) affecting 12.2.3–12.2.15. The issue, exposed in the Costing Transaction Errors component, can be exploited by a low-privilege attacker over HTTP to take over Oracle Cost Management. CVSS v3.1 base score 7.5 (HIG...

CVE-2026-60807

CVE-2026-60807 —Oracle E-Business Suite, Oracle Bills of Material (Internal Operations) is affected in versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges, after user interaction from a target, can compromise Oracle Bills of Material, potentially leading to takeo...

CVE-2026-60805

CVE-2026-60805 affects Oracle E-Business Suite Cost Management (Cost Planning); affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a high-privileged attacker with network access via HTTP and may allow unauthorized creation, deletion or modification of data, unauthorized acc...

CVE-2026-60802

CVE-2026-60802 affects Oracle E-Business Intelligence (Internal Operations) in Oracle E-Business Suite, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable with network access over HTTP and requires user interaction, enabling an unauthenticated attacker to compromise Oracle E-...

CVE-2026-60804

CVE-2026-60804 affects Oracle E-Business Intelligence (Definition) within Oracle E-Business Suite, affected for versions 12.2.3–12.2.15 . The vulnerability is exploitable by a high-privilege attacker with network access via HTTP; exploitation requires user interaction and can lead to an unauthori...

CVE-2026-60801

CVE-2026-60801 affects Oracle E-Business Intelligence (Internal Operations) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle E-Business Intelligence, potentially leading to unauthoriz...

CVE-2026-60800

CVE-2026-60800 affects Oracle E-Business Suite Oracle Compensation Workbench (component: Compensation Workbench), with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged, network-attached attacker and can lead to unauthorized data access and possible ...

CVE-2026-60799

Oracle E-Business Suite CVE-2026-60799 affects Compensation Workbench (component: Compensation Workbench) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to access or modify Oracle Compensation Workbench data, with Confidentiali...

CVE-2026-60794

The CVE-2026-60794 entry concerns Oracle TeleSales (Oracle E-Business Suite Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable over network via HTTP by a low-privileged attacker, potentially allowing unauthorized update/insert/delete and unauthorized read...

CVE-2026-60793

The CVE-2026-60793 entry concerns Oracle E-Business Suite, Oracle TeleSales (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, network-accessible attacker over HTTP to compromise Oracle TeleSales, potentially leading to unauthorized creation, ...

CVE-2026-60795

CVE-2026-60795 affects Oracle E-Business Suite iSetup in the General Ledger Update Transform/Reports component. Affected are E-Business Suite versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who has network access via HTTP, enabling unauthorized creation, de...

CVE-2026-60790

Oracle E-Business Suite's Oracle Sales Offline (component: Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-60790 vulnerability can be exploited by a high-privilege attacker with network access via HTTP to take over Oracle Sales Offline, with potential scope impact on rel...

CVE-2026-60789

CVE-2026-60789 affects Oracle Sales Offline in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The flaw allows a low-privilege, network-authenticated attacker over HTTP to take over Oracle Sales Offline, per CVSS 3.1 base score 8.8 (High). No exploitation details are pr...