CVE-2023-21852

CVE-2023-21852 affects Oracle E-Business Suite, specifically the Oracle Learning Management Setup component. Supported vulnerable versions are 12.2.3–12.2.12. The issue stems from insufficient input validation in the Setup area, enabling a remote unauthenticated attacker with network access via H...

CVE-2020-2880

CVE-2020-2880 affects Oracle E-Business Suite Oracle Learning Management (OTA Training Activities). Vulnerable versions: 12.1.1–12.1.3 and 12.2.3–12.2.9. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Learning Management; attacks may grant unauthor...

CVE-2026-60945

CVE-2026-60945 affects Oracle E-Business Suite’s Oracle Learning Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker who can access over HTTP to compromise Oracle Learning Management, requiring user interaction. Impact include...

CVE-2026-61198

Oracle E-Business Suite Learning Management (component: Internal Operations), versions 12.2.3 through 12.2.15, is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5) enabling unauthorized read, insert, update, and delete access to some application data. No exploitation det...

CVE-2026-60948

CVE-2026-60948 affects Oracle Learning Management, part of Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle Learning Management, potentially causing unauthorized creation, deletion,...

CVE-2026-62527

The CVE-2026-62527 entry concerns Oracle E-Business Suite’s Oracle Learning Management, component Import And Export. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over the network via HTTP, enabling unauthorized update/insert/delete an...

CVE-2026-61249

CVE-2026-61249 affects Oracle E-Business Suite Oracle Learning Management (component: Import And Export) in versions 12.2.3 through 12.2.15. The flaw enables a low-privileged, network-accessible attacker (via HTTP) to access Oracle Learning Management data, as described in the CVE details and NVD...