CVE-2021-2237

CVE-2021-2237 affects Oracle E-Business Suite's Oracle General Ledger, specifically the Account Hierarchy Manager, with vulnerable versions 12.1.1–12.1.3. The vulnerability allows a low-privilege, network-based attacker (via HTTP) to compromise the General Ledger, potentially enabling unauthorize...

CVE-2019-2638

The CVE-2019-2638 entry concerns Oracle E-Business Suite General Ledger, specifically the Consolidation Hierarchy Viewer component. Affected versions include 12.1.1–12.1.3 and 12.2.3–12.2.8. The root cause is an access-control weakness in the Consolidation Hierarchy Viewer that lets a low-privile...

CVE-2020-2750

The CVE-2020-2750 entry concerns Oracle E-Business Suite General Ledger, specifically the Account Hierarchy Manager component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is described as easily exploitable with unauthenticated network access via HTTP, allowing access ...

CVE-2017-10245

CVE-2017-10245 affects Oracle E-Business Suite’s General Ledger, specifically the Account Hierarchy Manager subcomponent. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle General...

CVE-2016-0588

CVE-2016-0588 affects Oracle E-Business Suite 11.5.10.2, specifically the General Ledger Consolidation Hierarchy Viewer component. The vulnerability is described as unspecified with remote attackers able to affect integrity via unknown vectors related to the Consolidation Hierarchy Viewer. The co...

CVE-2026-70796

A HIGH -severity vulnerability (CVSS 7.2) in the Internal Operations component of Oracle General Ledger (Oracle E-Business Suite 12.2.3-12.2.15) allows a high-privileged, locally-logged-in attacker to perform unauthorized creation, deletion, or modification of critical data with scope change affe...

CVE-2026-60769

A network-accessible vulnerability in Oracle E-Business Suite's General Ledger (Internal Operations component), affecting versions 12.2.3–12.2.15, allows a low-privileged attacker to achieve full product takeover (C/I/A impacts). CVSS 3.1 score 7.5 (HIGH). Oracle's August 2026 CPU advisory is the...

CVE-2026-70803

Oracle E-Business Suite General Ledger (component: Internal Operations) versions 12.2.3–12.2.15 are affected by an easily exploitable HTTP vulnerability (CVSS 7.6, HIGH) allowing low-privileged network attackers to read, modify, or delete critical data and cause partial denial of service. Oracle'...

CVE-2026-70764

CVE-2026-70764 affects the Oracle General Ledger product (component: Internal Operations) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data , perform una...

CVE-2026-60748

High-privileged network attacker can exploit the Internal Operations component in Oracle E-Business Suite 12.2.3–12.2.15 to gain full read access to General Ledger data and limited write access, with scope change potentially affecting additional Oracle products. CVSS 3.1 score 7.6 (HIGH). No expl...

CVE-2026-70686

Oracle E-Business Suite General Ledger (component: Internal Operations), versions 12.2.3–12.2.15, is vulnerable to an easily exploitable HTTP-based flaw allowing a low-privileged attacker to fully compromise the application (CVSS 8.8 High). No exploitation details are provided; see Oracle's CSPU ...

CVE-2026-60693

CVE-2026-60693 affects the Oracle General Ledger product (component: Internal Operations ) in Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit (high attack ...