CVE-2024-20990

CVE-2024-20990 affects Oracle E-Business Suite, specifically the Oracle Applications Technology (Templates) component. Affected versions are 12.2.3–12.2.13. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to obtain unauthorized read access to a subset of data i...

CVE-2025-30731

CVE-2025-30731 affects Oracle E-Business Suite, Oracle Applications Technology Stack (Configuration) in versions 12.2.3–12.2.14. An unauthenticated attacker with logon to the infrastructure can compromise the stack; successful attacks involve human interaction and may allow unauthorized updates/i...

CVE-2026-60670

CVE-2026-60670 is a vulnerability in Oracle E-Business Suite, specifically the Oracle Applications Technology Stack component Client System Analyzer. Affected are versions 12.2.3–12.2.15. The issue can be exploited by an unauthenticated, network-accessible attacker over HTTP to compromise the Ora...

CVE-2026-60762

The CVE affects Oracle E-Business Suite’s Applications Technology Stack, Configuration component, with affected versions 12.2.3–12.2.15. The root cause is not explicitly described beyond “configuration” in the Oracle Apps Tech Stack, but the vulnerability is exploitable by a high-privilege attack...