CVE-2026-60786

Summary (CVE-2026-60786): A vulnerability in Oracle Receivables (Oracle E-Business Suite) affecting the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle Receivables, potentiall...

CVE-2026-60785

CVE-2026-60785 affects Oracle E-Business Suite, Oracle iReceivables (AR Web Utilities), with affected versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables, potentially leading to takeover. CVSS 3.1 base score ...

CVE-2026-60784

CVE-2026-60784 affects Oracle E-Business Suite, Oracle Trading Community, Party Search UI. Affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access via HTTP to compromise Oracle Trading Community, potentially causing unauthorized creation, delet...

CVE-2026-60783

The CVE affects Oracle E-Business Suite: iReceivables, AR Web Utilities, in versions 12.2.3–12.2.15. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially allowing takeover of Oracle iReceivables and impacting confidentiality, integrity, and availability...

CVE-2026-60778

Vulnerability CVE-2026-60778 affects Oracle Payments in Oracle E-Business Suite (component: File Transmission) across 12.2.3–12.2.15. A low-privilege, unauthenticated attacker can access Oracle Payments over HTTP, leading to unauthorized creation, deletion or modification of critical data or full...

CVE-2026-60777

CVE-2026-60777 affects Oracle E-Business Suite Oracle Application Object Library (Core) with 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can update/insert/delete data and read data, with partial DOS impact. CVSS 3.1 base score 6.3 (LOW confidentiality, integrity, a...

CVE-2026-60780

CVE-2026-60780 affects Oracle Workflow in Oracle E-Business Suite (Internal Operations). Affected: 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker with network access via SMTP to compromise Oracle Workflow, potentially taking over the workflow. CVSS 3.1 base scor...

CVE-2026-60776

CVE-2026-60776 affects the Oracle Application Object Library (AOL) Generic Loader within Oracle E-Business Suite. Affected vendor/product: Oracle E-Business Suite AOL; affected component: AOL Generic Loader; affected versions: 12.2.3–12.2.15. Exploitation scenario: a highly privileged attacker wi...

CVE-2026-60775

CVE-2026-60775 affects Oracle E-Business Suite Pasta (Internal Operations) with supported affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where Pasta runs to compromise Pasta, potentially leading to takeover of the Pasta co...

CVE-2026-60774

Summary: CVE-2026-60774 is a vulnerability in Oracle Applications Framework (Oracle E-Business Suite), affecting 12.2.3 through 12.2.15. The flaw concerns the Search Bean (Incl. Advanced) component and can be exploited by a low-privileged attacker who can reach the system over HTTP to obtain unau...

CVE-2026-60772

CVE-2026-60772 affects Oracle E-Business Suite, Oracle Financials Common Modules (Common Components). Affected are 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker, potentially allowing unauthorized creation, deletion or modification of dat...

CVE-2026-60773

CVE-2026-60773 affects Oracle E-Business Suite’s Oracle Application Object Library (core) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTPS) to compromise OAOL, with potential for unauthorized creation, deletion, or modification of...

CVE-2026-60771

CVE-2026-60771 affects Oracle E-Business Suite, Oracle Complex Maintenance, Repair and Overhaul (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, enabling unau...

CVE-2026-60770

The CVE-2026-60770 entry concerns Oracle E-Business Suite, Oracle Application Object Library (Core), affected on 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker with network (HTTP) access and can lead to takeover of Oracle Application Object Library, as described in t...

CVE-2026-60768

CVE-2026-60768 affects Oracle E-Business Suite, Oracle Applications Framework (OA Framework) Graph/Charting component. Affected are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise OA Framework, potentially causing unauthorized creation, deletion or modif...

CVE-2026-60764

This CVE (CVE-2026-60764) affects Oracle E-Business Suite, specifically the Oracle Financials Common Modules component (Common Components). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable over a network with HTTP, by a low-privilege attacker, and can lead to unautho...

CVE-2026-60762

The CVE affects Oracle E-Business Suite’s Applications Technology Stack, Configuration component, with affected versions 12.2.3–12.2.15. The root cause is not explicitly described beyond “configuration” in the Oracle Apps Tech Stack, but the vulnerability is exploitable by a high-privilege attack...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60760

The CVE-2026-60760 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability, described in both NVD records and Oracle’s advisory context, requires network access via HTTP and low privileges to potent...

CVE-2026-60761

CVE-2026-60761 affects Oracle Applications DBA (Internal Operations) in Oracle E-Business Suite, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged user who can log on to the infrastructure where Oracle Applications DBA runs, potentially leading to unautho...

CVE-2026-60756

CVE-2026-60756 affects Oracle EDI Gateway (Oracle E-Business Suite), component: All Miscellaneous EDI Issues, with exposed versions 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker over HTTP to compromise the Oracle EDI Gateway, potentially leading to takeover. CV...

CVE-2026-60750

CVE-2026-60750 affects Oracle E-Business Suite, Oracle Payroll (Internal Operations) for versions 12.2.3–12.2.15. A low-privilege, network-accessible (HTTP) attacker can compromise Oracle Payroll, with potential impact beyond the Payroll component. The vulnerability’s base score is 7.7 (Confident...

CVE-2026-60749

CVE-2026-60749 is a vulnerability in Oracle Assets (Oracle E-Business Suite), affecting 12.2.3–12.2.15 of the Internal Operations component. The issue is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of critical da...

CVE-2026-60755

Summary of CVE-2026-60755 (Oracle E-Business Suite – Oracle Assets) : The vulnerability affects Oracle Assets (Internal Operations) within Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.15. An attacker with high privileges can exploit this over the network via HTTP to compr...

CVE-2026-60744

CVE-2026-60744 affects Oracle E-Business Suite Cost Management (Internal Operations) in supported 12.2.3–12.2.15. The vulnerability, exploitable by a low-privilege attacker with network access over HTTP, can lead to unauthorized creation, deletion or modification of data within Oracle Cost Manage...

CVE-2026-60741

CVE-2026-60741 affects Oracle E-Business Suite Oracle Cost Management (Internal Operations) with vulnerable versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Cost Management, potentially creating, deleting, or modifying data across all accessible ...

CVE-2026-60747

CVE-2026-60747 affects Oracle MySQL: Server (Replication) and MySQL Cluster. Affected: MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability allows an unauthenticated attacker with logon to the infrastructure where MySQL Server/Cluster...

CVE-2026-60738

CVE-2026-60738 affects Oracle E-Business Suite Installed Base component Create Item Instance. Affected versions are 12.2.3–12.2.15. The vulnerability allows an unauthenticated? actually low privileged attacker with network access via HTTP to compromise Oracle Installed Base, potentially leading t...

CVE-2026-60740

The CVE-2026-60740 entry describes a vulnerability in Oracle’s E-Business Suite Oracle Cash Management (Internal Operations), affecting versions 12.2.3–12.2.15. The issue is exploitable by a low-privilege, network-accessing attacker over HTTP, with potential unauthorized creation, deletion or mod...

CVE-2026-60739

CVE-2026-60739 affects Oracle Field Service within Oracle E-Business Suite (component: Internal Operations) and is applicable to supported versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker who has network access via HTTP to compromise Oracle Field Service, p...

CVE-2026-60734

The CVE-2026-60734 entry concerns Oracle E-Business Suite’s Oracle Trading Community product (Party Search UI). Affected versions are 12.2.3–12.2.12. The vulnerability enables a high-privilege attacker with network access over HTTP to compromise Oracle Trading Community, with potential takeover o...

CVE-2026-60735

CVE-2026-60735 affects Oracle E-Business Suite, Oracle Sales Offline (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privilege gains network access via HTTP to compromise Oracle Sales Offline, enabling unauthorized creation, deletion or modification of data and potentially ...

CVE-2026-60736

The CVE-2026-60736 entry concerns Oracle E-Business Intelligence (Definition component) within Oracle E-Business Suite. Affected are versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation, d...

CVE-2026-60724

CVE-2026-60724 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result) in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-authenticated attacker (HTTP) to potentially update/insert/delete and read data, with Confidentiality and Integrity im...

CVE-2026-60732

CVE-2026-60732 relates to Oracle iReceivables (Oracle E-Business Suite AR Web Utilities), affected in 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP to gain unauthorized creation, deletion or modification of data, or full access to Oracle iReceivables dat...

CVE-2026-60725

CVE-2026-60725 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The issue allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, leading to unauthorized creation, deletion or modification of data access...

CVE-2026-60723

CVE-2026-60723 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Market Place component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege user with logon to the underlying infrastructure to compromise Oracle Data Integrator, with ...

CVE-2026-60719

CVE-2026-60719 affects Oracle Analytics’ Oracle BI Publisher Web Service API. Affected: 8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0. A low-privilege attacker with network access over HTTP can compromise Oracle BI Publisher, potentially exposing or altering confidential data across Oracle BI Publisher data...

CVE-2026-60718

CVE-2026-60718 affects Oracle MySQL products: MySQL Server (Server: JSON) and MySQL Cluster, versioned 9.7.0–9.7.1. The vulnerability, arising in the Server JSON component, allows a low-privileged, network-accessible attacker via multiple protocols to cause a hang or frequent crash (DoS) of the M...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...

CVE-2026-60714

CVE-2026-60714 affects Oracle Price Protection (Oracle E-Business Suite, Internal Operations) for versions 12.2.3–12.2.15. The vulnerability, exploitable over HTTP by a low-privilege user with network access, can lead to unauthorized creation, deletion or modification of data, and unauthorized ac...

CVE-2026-60711

Summary: CVE-2026-60711 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The issue allows a low-privilege attacker over a network via HTTP to compromise the product, potentially taking over Siebel CRM Cloud Applications; impacts include confide...

CVE-2026-60712

The CVE-2026-60712 entry concerns Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component. Affected versions are 22.3–26.5. The vulnerability is described as easily exploitable by a low-privileged attacker who can log on to the hosting infrastructure to compromise Si...

CVE-2026-60713

CVE-2026-60713 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability allows a low-privileged, logon user (local attack vector) to potentially update/insert/delete and read data in Siebel CRM Cloud Applications due to a disclosed is...

CVE-2026-60710

The CVE-2026-60710 entry concerns Oracle EDI Gateway (Oracle E-Business Suite) in the Internal Operations component, affected in versions 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, leading to unauthorized creation, deletion, or modificat...

CVE-2026-60709

CVE-2026-60709 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability allows an unauthenticated attacker with access to the hardware’s physical communication segment to compromise Siebel CRM Cloud Applications, enabling unauthorized...

CVE-2026-60708

CVE-2026-60708 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privileged attacker over HTTP with network access, potentially enabling creation, deletion or modificati...

CVE-2026-60706

CVE-2026-60706 affects Oracle E-Business Suite’s Oracle Process Manufacturing Inventory (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a network-based, low-privilege attacker over HTTP to compromise the Inventory, enabling unauthorized creation, deletion, o...

CVE-2026-60704

CVE-2026-60704 affects Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component, with vulnerable versions 22.3–26.5. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Siebel CRM Cloud Applications, potentially enabling un...

CVE-2026-60705

CVE-2026-60705 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access, enabling unauthorized data access, unauthorized data modification, and partial deni...