CVE-2026-62507

CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62505

CVE-2026-62505 affects Oracle Time and Labor, a component of Oracle E-Business Suite, with impacted versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker able to reach Oracle Time and Labor over HTTP to compromise data, with the attack requiring human interaction. Potentia...

CVE-2026-62503

CVE-2026-62503 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). The vulnerability involves the Internal Operations component and is exploitable by a high-privilege attacker over HTTP with network access, enabling unauthorized create/delete/modify of data and partial deni...

CVE-2026-62497

CVE-2026-62497 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.13–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Flow Manufacturing, potentially leading to unauthorized creation, deletion, or modificati...

CVE-2026-62496

CVE-2026-62496 affects Oracle Yard Management within Oracle E-Business Suite (Internal Operations) for EBS versions 12.2.6–12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged user and can lead to takeover of Oracle Yard Management (CVSS 3.1 base score 8.8)....

CVE-2026-62498

CVE-2026-62498 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.7–12.2.15. The vulnerability is exploitable over HTTP with a network access from a low-privileged attacker and can lead to takeover of Oracle Flow Manufacturing, per initial and NVD descriptions. The CVSS ...

CVE-2026-62495

CVE-2026-62495 concerns Oracle E-Business Suite (Process Manufacturing → Process Execution) vulnerable in 12.2.15. The flaw allegedly enables a low-privileged, network-accessing attacker (via HTTP) to take over the Oracle Process Manufacturing Process Execution, with impact on confidentiality, in...

CVE-2026-62494

The CVE-2026-62494 entry affects Oracle Time and Labor in Oracle E-Business Suite, specifically the Internal Operations component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized creatio...

CVE-2026-62493

CVE-2026-62493 affects Oracle E-Business Suite – Oracle Purchasing (Internal Operations). Affected versions are 12.2.11–12.2.15. The vulnerability is exploitable by a low-privilege user with network access over HTTP and can lead to takeover of Oracle Purchasing. CVSS v3.1 base score is 7.5 (Impac...

CVE-2026-62489

CVE-2026-62489 is a vulnerability in Oracle E-Business Suite – Oracle Contracts Integration (Internal Operations). Affected are 12.2.3–12.2.15. The issue allows a low-privilege attacker who can access the product over HTTP to perform unauthorized updates, inserts or deletes, and to read data with...

CVE-2026-62488

CVE-2026-62488 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). In affected releases 12.2.3–12.2.15, a low-privilege, network-accessible attacker via HTTP can compromise Oracle Contracts Integration, leading to unauthorized creation, deletion or modification of...

CVE-2026-62490

CVE-2026-62490 affects Oracle E-Business Suite Oracle Contracts Integration (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access to compromise the Oracle Contracts Integration and potentially gain access to...

CVE-2026-62487

CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...

CVE-2026-62486

CVE-2026-62486 affects Oracle Contracts Integration in Oracle E-Business Suite (component: Internal Operations) for supported 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Contracts Integration. Successful attacks require h...

CVE-2026-62484

CVE-2026-62484 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). Supported affected versions: 12.2.3–12.2.15. The vulnerability, with CVSSv3.1 base score 5.9 (Integrity), can be exploited by an unauthenticated, network-accessible attacker over HTTP to cause unau...

CVE-2026-62483

The CVE-2026-62483 entry concerns Oracle E-Business Suite, specifically the Project Contracts product (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, leading to possible unauthorized u...

CVE-2026-62482

CVE-2026-62482 affects Oracle E-Business Suite – Oracle Public Sector Financials, Internal Operations component. Affected versions: 12.2.3 through 12.2.15. An attacker with network access over HTTP and low privileges can compromise data through unauthorized update/insert/delete and unauthorized r...

CVE-2026-62480

The CVE-2026-62480 entry covers a vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite), specifically the Internal Operations component. Affected are versions 12.2.3 through 12.2.15. The description states that a low-privileged attacker with network access over HTTP can compr...

CVE-2026-62479

CVE-2026-62479 affects Oracle E-Business Suite, Oracle Public Sector Financials (Internal Operations) in the 12.2.3–12.2.15 range. The vulnerability is exploitable remotely over HTTP by a low-privilege attacker and requires user interaction. Successful attacks could lead to unauthorized update/in...