CVE-2021-2156

CVE-2021-2156 affects Oracle E-Business Suite, Oracle Customers Online (Customer Tab) on versions 12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, network-accessing attacker over HTTP to cause unauthorized creation/deletion/modification of data or access to all Oracle Customers Online...

CVE-2026-61297

CVE-2026-61297 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access, potentially leading to unauthorized creation, deletion, or modification...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61020

CVE-2026-61020 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) on versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over network access via HTTP, potentially leading to unauthorized creation, deletion or modification of d...

CVE-2026-70747

Oracle E-Business Suite 12.2.3–12.2.15 Customer Tab component allows low-privileged network attackers to take over Oracle Customers Online (CVSS 8.8 HIGH, full CIA impact). No root cause or fix details provided; monitor Oracle CPU updates for patches.