CVE-2026-60724

CVE-2026-60724 affects Oracle E-Business Suite, Oracle Customer Interaction History (Outcome-Result) in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-authenticated attacker (HTTP) to potentially update/insert/delete and read data, with Confidentiality and Integrity im...

CVE-2026-60732

CVE-2026-60732 relates to Oracle iReceivables (Oracle E-Business Suite AR Web Utilities), affected in 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP to gain unauthorized creation, deletion or modification of data, or full access to Oracle iReceivables dat...

CVE-2026-60725

CVE-2026-60725 affects Oracle MySQL Router (Router: General). Affects MySQL Router versions 8.4.0–8.4.10 and 9.7.0–9.7.1. The issue allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router, leading to unauthorized creation, deletion or modification of data access...

CVE-2026-60723

CVE-2026-60723 affects Oracle Data Integrator (Oracle Fusion Middleware), specifically the Market Place component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows a low-privilege user with logon to the underlying infrastructure to compromise Oracle Data Integrator, with ...

CVE-2026-60719

CVE-2026-60719 affects Oracle Analytics’ Oracle BI Publisher Web Service API. Affected: 8.2.0.0.0, 12.2.1.4.0, 26.01.0.0.0. A low-privilege attacker with network access over HTTP can compromise Oracle BI Publisher, potentially exposing or altering confidential data across Oracle BI Publisher data...

CVE-2026-60718

CVE-2026-60718 affects Oracle MySQL products: MySQL Server (Server: JSON) and MySQL Cluster, versioned 9.7.0–9.7.1. The vulnerability, arising in the Server JSON component, allows a low-privileged, network-accessible attacker via multiple protocols to cause a hang or frequent crash (DoS) of the M...

CVE-2026-60717

The CVE-2026-60717 entry concerns Oracle E-Business Suite, specifically the Common Utilities component of Oracle Complex Maintenance, Repair and Overhaul. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-accessible attacker via HTTP to modify and read data (unautho...

CVE-2026-60714

CVE-2026-60714 affects Oracle Price Protection (Oracle E-Business Suite, Internal Operations) for versions 12.2.3–12.2.15. The vulnerability, exploitable over HTTP by a low-privilege user with network access, can lead to unauthorized creation, deletion or modification of data, and unauthorized ac...

CVE-2026-60711

Summary: CVE-2026-60711 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The issue allows a low-privilege attacker over a network via HTTP to compromise the product, potentially taking over Siebel CRM Cloud Applications; impacts include confide...

CVE-2026-60712

The CVE-2026-60712 entry concerns Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component. Affected versions are 22.3–26.5. The vulnerability is described as easily exploitable by a low-privileged attacker who can log on to the hosting infrastructure to compromise Si...

CVE-2026-60713

CVE-2026-60713 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability allows a low-privileged, logon user (local attack vector) to potentially update/insert/delete and read data in Siebel CRM Cloud Applications due to a disclosed is...

CVE-2026-60710

The CVE-2026-60710 entry concerns Oracle EDI Gateway (Oracle E-Business Suite) in the Internal Operations component, affected in versions 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, leading to unauthorized creation, deletion, or modificat...

CVE-2026-60709

CVE-2026-60709 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability allows an unauthenticated attacker with access to the hardware’s physical communication segment to compromise Siebel CRM Cloud Applications, enabling unauthorized...

CVE-2026-60708

CVE-2026-60708 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privileged attacker over HTTP with network access, potentially enabling creation, deletion or modificati...

CVE-2026-60706

CVE-2026-60706 affects Oracle E-Business Suite’s Oracle Process Manufacturing Inventory (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a network-based, low-privilege attacker over HTTP to compromise the Inventory, enabling unauthorized creation, deletion, o...

CVE-2026-60704

CVE-2026-60704 affects Oracle Siebel CRM Cloud Applications, specifically the Siebel Cloud Manager component, with vulnerable versions 22.3–26.5. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Siebel CRM Cloud Applications, potentially enabling un...

CVE-2026-60705

CVE-2026-60705 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) with affected versions 22.3–26.5. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access, enabling unauthorized data access, unauthorized data modification, and partial deni...

CVE-2026-60703

The CVE-2026-60703 entry concerns Oracle Interaction Blending (Internal Operations) in Oracle E-Business Suite, affected on 12.2.3–12.2.15. A local, low-privileged attacker with logon can compromise Oracle Interaction Blending, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-60701

CVE-2026-60701 is a vulnerability in Oracle E-Business Suite’s Oracle Universal Work Queue, specifically the Work Provider Site Level Administration component. Affected versions are 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access via HTTP to compromise ...

CVE-2026-60700

The CVE-2026-60700 entry concerns Oracle E-Business Suite Oracle Universal Work Queue (UWQ) server issues. Affected are 12.2.3–12.2.15; the flaw allows unauthenticated, HTTP-accessible remote compromise, with human interaction required, leading to unauthorized creation/deletion/modification of UW...

CVE-2026-60697

The CVE-2026-60697 entry concerns Oracle Site Hub within Oracle E-Business Suite. Affected): Site Hierarchy Flows in versions 12.2.3 through 12.2.15 are vulnerable. The vulnerability enables a low-privilege, unauthenticated or minimally authenticated attacker with network access over HTTP to perf...

CVE-2026-60694

The CVE-2026-60694 entry is associated with Oracle Enterprise Asset Management (Oracle E-Business Suite) Internal Operations, affected on 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP and requires user interaction. Successful exploitat...

CVE-2026-60692

CVE-2026-60692 affects Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP from the network, with no user interaction required, leading to takeov...

CVE-2026-60695

The CVE-2026-60695 entry concerns Oracle E-Business Suite’s Oracle Enterprise Asset Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability, described across NVD/NVD mirror entries, allows a highly-privileged attacker who can reach the system over HTTP to comprom...

CVE-2026-60691

CVE-2026-60691 affects Oracle E-Business Suite’s Oracle Content Manager (Internal Operations). Affected are 12.2.3–12.2.15. The flaw enables a low-privileged attacker with network access via HTTP to compromise Oracle Content Manager, potentially causing unauthorized creation, deletion, or modific...

CVE-2026-60689

Summary : CVE-2026-60689 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) in versions 22.3–26.5. It allows an unauthenticated, network-accessible attacker (via HTTP) to compromise the system, potentially enabling unauthorized access to critical data or complete access to all Si...

CVE-2026-60690

CVE-2026-60690 affects Oracle Siebel CRM Cloud Applications (Siebel Cloud Manager) for Siebel versions 22.3–26.5. Vulnerability allows a low-privileged user with network access over HTTP to compromise the Siebel Cloud Applications, potentially leading to unauthorized access to critical data or fu...

CVE-2026-60687

CVE-2026-60687 affects Oracle U.S. Federal Financials within Oracle E-Business Suite (Internal Operations). Affected: 12.2.3–12.2.15. The flaw allows an unauthenticated, network-accessible attacker over HTTPS to compromise the Oracle U.S. Federal Financials, with potential access to all accessibl...

CVE-2026-60686

CVE-2026-60686 affects Oracle E-Business Suite, Oracle U.S. Federal Financials (Internal Operations) with affected 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit over HTTP to potentially modify, delete, or read critical data in Oracle U.S. Federal Financials, per the pr...

CVE-2026-60688

CVE-2026-60688 affects Oracle E-Business Suite, Oracle Scheduler (Rules UI) with affected versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker over HTTP with network access, enabling unauthorized updates, inserts, or deletes on Oracle Scheduler data, unauthorize...

CVE-2026-60684

CVE-2026-60684 affects Oracle E-Business Suite’s Oracle Applications Framework (Upload Attachments) in versions 12.2.8–12.2.15. Reported risk: a low-privileged, network-accessible attacker can exploit via HTTP and, with user interaction, potentially update/insert/delete data and read data within ...

CVE-2026-60685

CVE-2026-60685 : Vulnerability in Oracle iSupport (Oracle E-Business Suite Internal Operations) affecting versions 12.2.3–12.2.15. An unauthenticated attacker can exploit via HTTP with network access and required user interaction to gain unauthorized read/update/delete access to Oracle iSupport d...

CVE-2026-60683

CVE-2026-60683 affects Oracle E-Business Suite’s Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated or network-reachable attacker to compromise the Regulatory Management module v...

CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60681

CVE-2026-60681 affects Oracle E-Business Suite Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the component, potentially leading to ...

CVE-2026-60675

CVE-2026-60675 affects Oracle E-Business Suite’s Oracle Applications Framework (OAF) – specifically the Search Bean component – in versions 12.2.3–12.2.15. The vulnerability enables a network-accessible, low-privilege attacker over HTTP to compromise OAF, potentially taking over the framework. CV...

CVE-2026-60676

The CVE affects Oracle E-Business Suite's Oracle Applications Framework (component: Search Bean). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the Oracle Applications Framework, potentially leading to takeover...

CVE-2026-60677

CVE-2026-60677 affects Oracle E-Business Suite’s Oracle Common Modules (Oracle Common Application Components) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to compromise Oracle Common Application Components, potentially leading to una...

CVE-2026-60674

CVE-2026-60674 affects Oracle Analytics’ Oracle BI Enterprise Edition (BI Platform Security). Affected versions are 8.2.0.0.0 and 26.01.0.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially resulting in unauthorized access ...

CVE-2026-60671

CVE-2026-60671 is a vulnerability in Oracle Analytics’ Oracle Business Intelligence Enterprise Edition (BI Platform Security) affecting supported versions 8.2.0.0.0 and 26.01.0.0.0. The flaw allows an unauthenticated, network-accessing attacker over HTTP to cause a complete denial of service via ...

CVE-2026-60673

The CVE-2026-60673 entry concerns Oracle BI Publisher (Oracle Analytics) with affected XML Services. Affected versions are 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, leading to unauthorized access to Oracle...

CVE-2026-60670

CVE-2026-60670 is a vulnerability in Oracle E-Business Suite, specifically the Oracle Applications Technology Stack component Client System Analyzer. Affected are versions 12.2.3–12.2.15. The issue can be exploited by an unauthenticated, network-accessible attacker over HTTP to compromise the Ora...

CVE-2026-60669

The CVE-2026-60669 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Mexico (component: Global Payroll for Mexico) with affected version 9.2. A low-privilege, network-accessible (via HTTP) attacker can access and modify data, potentially causing unauthorized data changes and a partia...

CVE-2026-60668

Summary: CVE-2026-60668 affects Oracle PeopleSoft Enterprise HCM Human Resources (French Public Sector Specific) on version 9.2. The vulnerability is exploitable over HTTP by an unauthenticated network attacker, potentially leading to unauthorized data access and, for some data, unauthorized upda...

CVE-2026-60667

CVE-2026-60667 affects Oracle PeopleSoft Enterprise HCM Human Resources (Core) on the 9.2 release. The connected documents identify that unauthenticated attackers can reach the system over TCP and leverage the vulnerability to create, delete, or modify data, or cause a hang/crash (DoS). The CVSS ...

CVE-2026-60666

The CVE-2026-60666 entry describes a vulnerability in Oracle PeopleSoft Enterprise HCM Human Resources (PeopleSoft HCM HR), affecting the 9.2 release. The issue concerns the Security component and can be exploited by a low-privilege attacker with network access via Oracle Net. Successful exploita...

CVE-2026-60663

The CVE-2026-60663 entry relates to Oracle WebCenter Content (Web Content Management) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The flaw is exploitable by a low-privilege, unauthenticated or network-accessing attacker over HTTP, enabling takeover of Oracle WebC...

CVE-2026-60665

Affected software: Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland, component Global Payroll for Switzerland , affected version 9.2 . The documents do not specify root cause details. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the syst...

CVE-2026-60664

CVE-2026-60664 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content, with human interaction required. Succes...

CVE-2026-60661

CVE-2026-60661 affects Oracle Solaris 11.4 (Filesystems). The vulnerability is exploitable by a low-privilege, logged-in user to compromise Oracle Solaris, with potential scope change affecting additional products and full takeover of Solaris. CVSS 3.1 base score 7.8 (HIGH) with local attack vect...