CVE-2026-62524

The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...

CVE-2026-62525

CVE-2026-62525 describes a vulnerability in the Oracle Quality component of Oracle E-Business Suite (Quality Workbench HTML system). Affected are supported Oracle E-Business Suite 12.2.3–12.2.15. The issue can be exploited by a low-privilege, unauthenticated attacker over HTTP to perform unauthor...

CVE-2026-62518

Affected product: Oracle E-Business Suite — Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. Vulnerability details: Low-privilege, network-access attacker (via HTTP) can compromise Oracle Production Scheduling, with potential unauthorized create/delete/modify of data, unaut...

CVE-2026-62519

CVE-2026-62519 affects Oracle E-Business Suite’s Succession Planning (Succession plan) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Succession planning component, potentially enabling unauthorized update/i...

CVE-2026-62514

The CVE affects Oracle E-Business Suite – Oracle Process Manufacturing Regulatory Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise the product, potentially leading to ...

CVE-2026-62516

CVE-2026-62516 affects Oracle Demantra Demand Management within Oracle Supply Chain Security (Product Security). Affected are versions 12.2.3 through 12.2.15. The issue allows a low-privilege, unauthenticated attacker with network access (via SQL) to compromise the Demantra system, with potential...

CVE-2026-62517

The CVE-2026-62517 entry concerns the Oracle E-Business Suite Oracle Production Scheduling product (Internal Operations component). Affected are versions 12.2.3 through 12.2.15. The flaw is described as unauthenticated-over-network via HTTP with user interaction required, potentially allowing acc...

CVE-2026-62515

CVE-2026-62515 affects Oracle E-Business Suite’s Oracle Advanced Planning Command Center (Internal Operations) with affected versions 12.2.3–12.2.15. The CVSS 3.1 base score is 7.6 (Confidentiality and Integrity impacts). The vulnerability is exploitable over HTTP with network access by a high-pr...

CVE-2026-62513

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Regulatory Management product (Internal Operations). Affected are 12.2.3–12.2.15. The flaw can be exploited by a low-privilege attacker with network access via HTTP to gain unauthorized access to data or perfor...

CVE-2026-62508

CVE-2026-62508 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The flaw can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracle Time and Labor. The CVSS 3.1 base score is 3.1...

CVE-2026-62507

CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62505

CVE-2026-62505 affects Oracle Time and Labor, a component of Oracle E-Business Suite, with impacted versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker able to reach Oracle Time and Labor over HTTP to compromise data, with the attack requiring human interaction. Potentia...

CVE-2026-62503

CVE-2026-62503 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). The vulnerability involves the Internal Operations component and is exploitable by a high-privilege attacker over HTTP with network access, enabling unauthorized create/delete/modify of data and partial deni...

CVE-2026-62497

CVE-2026-62497 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.13–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Flow Manufacturing, potentially leading to unauthorized creation, deletion, or modificati...

CVE-2026-62496

CVE-2026-62496 affects Oracle Yard Management within Oracle E-Business Suite (Internal Operations) for EBS versions 12.2.6–12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged user and can lead to takeover of Oracle Yard Management (CVSS 3.1 base score 8.8)....

CVE-2026-62498

CVE-2026-62498 affects Oracle Flow Manufacturing (Oracle E-Business Suite) in versions 12.2.7–12.2.15. The vulnerability is exploitable over HTTP with a network access from a low-privileged attacker and can lead to takeover of Oracle Flow Manufacturing, per initial and NVD descriptions. The CVSS ...

CVE-2026-62495

CVE-2026-62495 concerns Oracle E-Business Suite (Process Manufacturing → Process Execution) vulnerable in 12.2.15. The flaw allegedly enables a low-privileged, network-accessing attacker (via HTTP) to take over the Oracle Process Manufacturing Process Execution, with impact on confidentiality, in...

CVE-2026-62494

The CVE-2026-62494 entry affects Oracle Time and Labor in Oracle E-Business Suite, specifically the Internal Operations component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized creatio...

CVE-2026-62493

CVE-2026-62493 affects Oracle E-Business Suite – Oracle Purchasing (Internal Operations). Affected versions are 12.2.11–12.2.15. The vulnerability is exploitable by a low-privilege user with network access over HTTP and can lead to takeover of Oracle Purchasing. CVSS v3.1 base score is 7.5 (Impac...