CVE-2026-62600

A HIGH-severity (CVSS 8.1) flaw in Oracle E-Business Suite's Internal Operations component (Oracle Sales, versions 12.2.3–12.2.15) lets a low-privilege, network-attacker via HTTP gain unauthorized read/write access to all Sales data. No in-the-wild exploitation is reported; apply Oracle's August ...

CVE-2026-70706

CVE-2026-70706 affects Oracle Sales (Internal Operations) in E-Business Suite versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit it via HTTP to take over Oracle Sales (CVSS 7.5 HIGH, C/I/A impacts). No exploit code or in-the-wild activity is provided in the documen...

CVE-2026-62601

Oracle Sales in E-Business Suite versions 12.2.3-12.2.15 is vulnerable in the Internal Operations component; a low-privileged attacker with network HTTP access can read all Sales data and modify some, at CVSS 7.1 (HIGH). Oracle's August 2026 CPU advisory provides patches; no exploit code is prese...