CVE-2026-62607

A high-severity (CVSS 8.7) flaw in Oracle E-Business Suite's Customer Care "Internal Operations" component (versions 12.2.3–12.2.15) lets a high-privileged, network-attached attacker gain unauthorized read/write access to critical data, with scope change potentially affecting other products. Orac...

CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...

CVE-2026-60920

The CVE-2026-60920 entry affects Oracle E-Business Suite, Oracle Customer Care (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Customer Care. The CVSS 3.1 base ...