CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2019-2633

CVE-2019-2633 : Vulnerability in Oracle E-Business Suite Work in Process (Messages) affecting 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. A low-privileged, network-accessible attacker (via HTTP) can compromise data in Work in Process; CVSS v3.1 base score 9.9 (CRITICAL) with C/H/I/H and A/L. Root caus...

CVE-2018-2655

Affected product: Oracle E-Business Suite — Work in Process component (subcomponent Assemble/Configure to Order). Vulnerable versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7. Description from multiple sources confirms an easily exploitable vulnerability allowing an unauthe...

CVE-2026-60891

CVE-2026-60891 affects Oracle Work in Process (Internal Operations) in Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker who has a logon to the infrastructure where Oracle WIP runs, potentially enabling unauthorized read...

CVE-2026-62563

CVE-2026-62563 affects Oracle Work in Process (Oracle E-Business Suite) component Internal Operations, across 12.2.5–12.2.15. It allows a low-privileged, network-accessible attacker (HTTP) with required human interaction to compromise data via unauthorized update/insert/delete and read of Oracle ...

CVE-2026-60888

CVE-2026-60888 : In Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations) on affected 12.2.3–12.2.15 versions is vulnerable. The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Work in Process, with potential unauthorized acces...

CVE-2026-60886

CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...

CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...