CVE-2021-2252

CVE-2021-2252 affects Oracle E-Business Suite’s Oracle Loans module (Loan Details, Loan Accounting Events). Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion, or...

CVE-2026-70844

Oracle E-Business Suite's Oracle Loans product (Internal Operations component), versions 12.2.3 through 12.2.15, contains an easily exploitable flaw allowing a low-privileged, network-based attacker via HTTP to access critical data and perform unauthorized update, insert, or delete operations. CV...

CVE-2026-70845

Oracle E-Business Suite 12.2.3-12.2.15's Loans product, Internal Operations component, allows a low-privileged remote attacker via HTTP to create, delete, or modify critical Loans data and cause partial denial of service (CVSS 7.1 HIGH). Oracle's August 2026 CPU advisory is the remediation source.

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...