CVE-2026-61116

Affected product: Oracle E-Business Suite, Oracle Application Object Library (Core). Vulnerable versions: 12.2.3 through 12.2.15. Issue: unauthenticated, network-accessible via HTTP attacker can potentially access or exfiltrate Oracle Application Object Library data. Root cause and exact exploit ...

CVE-2026-60154

The CVE-2026-60154 entry applies to Oracle E-Business Suite’s Oracle Application Object Library (Core). Affected are Oracle Application Object Library in EBS versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to modify and read Oracle AOL data:...

CVE-2026-60777

CVE-2026-60777 affects Oracle E-Business Suite Oracle Application Object Library (Core) with 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can update/insert/delete data and read data, with partial DOS impact. CVSS 3.1 base score 6.3 (LOW confidentiality, integrity, a...

CVE-2026-60776

CVE-2026-60776 affects the Oracle Application Object Library (AOL) Generic Loader within Oracle E-Business Suite. Affected vendor/product: Oracle E-Business Suite AOL; affected component: AOL Generic Loader; affected versions: 12.2.3–12.2.15. Exploitation scenario: a highly privileged attacker wi...

CVE-2026-61111

CVE-2026-61111 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL) Core. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege user who can log on to the host where AOL runs to compromise AOL, with potential impact extending to related products (scope change...

CVE-2026-61113

The CVE-2026-61113 entry affects Oracle E-Business Suite’s Oracle Application Object Library (Core) in versions 12.2.3–12.2.15. It can be exploited by an unauthenticated attacker over HTTP to compromise data, with confidentiality and integrity impacts (CVSS v3.1: 7.4, HIGH). The description notes...

CVE-2026-61114

CVE-2026-61114 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL) with the DB Privileges component in affected 12.2.3–12.2.15. The issue allows a low-privilege, network-accessible attacker (via HTTP) to compromise AOL and potentially take over the library. CVSS 3.1 base sco...

CVE-2026-60770

The CVE-2026-60770 entry concerns Oracle E-Business Suite, Oracle Application Object Library (Core), affected on 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker with network (HTTP) access and can lead to takeover of Oracle Application Object Library, as described in t...