CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2019-2633

CVE-2019-2633 : Vulnerability in Oracle E-Business Suite Work in Process (Messages) affecting 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. A low-privileged, network-accessible attacker (via HTTP) can compromise data in Work in Process; CVSS v3.1 base score 9.9 (CRITICAL) with C/H/I/H and A/L. Root caus...

CVE-2018-2655

Affected product: Oracle E-Business Suite — Work in Process component (subcomponent Assemble/Configure to Order). Vulnerable versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7. Description from multiple sources confirms an easily exploitable vulnerability allowing an unauthe...

CVE-2026-62462

Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...

CVE-2026-62458

Oracle E-Business Suite (component: Internal Operations of Work in Process) versions 12.2.3–12.2.15 are affected by a HIGH-severity (CVSS 7.1) vulnerability exploitable over HTTP by a low-privileged attacker, enabling denial-of-service (hang/crash) and unauthorized data modification. No in-the-wi...

CVE-2026-60888

CVE-2026-60888 : In Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations) on affected 12.2.3–12.2.15 versions is vulnerable. The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Work in Process, with potential unauthorized acces...

CVE-2026-60891

CVE-2026-60891 affects Oracle Work in Process (Internal Operations) in Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker who has a logon to the infrastructure where Oracle WIP runs, potentially enabling unauthorized read...

CVE-2026-62449

Oracle Work in Process (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3–12.2.15 has a local privilege escalation flaw rated CVSS 7.0 (HIGH), allowing a low-privileged attacker with host access to compromise the product with full confidentiality, integrity, and availabil...

CVE-2026-60886

CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...

CVE-2026-62563

CVE-2026-62563 affects Oracle Work in Process (Oracle E-Business Suite) component Internal Operations, across 12.2.5–12.2.15. It allows a low-privileged, network-accessible attacker (HTTP) with required human interaction to compromise data via unauthorized update/insert/delete and read of Oracle ...

CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...