CVE-2026-62489

CVE-2026-62489 is a vulnerability in Oracle E-Business Suite – Oracle Contracts Integration (Internal Operations). Affected are 12.2.3–12.2.15. The issue allows a low-privilege attacker who can access the product over HTTP to perform unauthorized updates, inserts or deletes, and to read data with...

CVE-2026-62488

CVE-2026-62488 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). In affected releases 12.2.3–12.2.15, a low-privilege, network-accessible attacker via HTTP can compromise Oracle Contracts Integration, leading to unauthorized creation, deletion or modification of...

CVE-2026-62490

CVE-2026-62490 affects Oracle E-Business Suite Oracle Contracts Integration (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker over HTTP with network access to compromise the Oracle Contracts Integration and potentially gain access to...

CVE-2026-62487

CVE-2026-62487 affects Oracle Contracts Integration in Oracle E-Business Suite (12.2.3–12.2.15). An unauthenticated, network-accessible via HTTP attacker can exploit with required user interaction to cause unauthorized updates/deletes and reads of Oracle Contracts Integration data. CVSS 3.1 base ...

CVE-2026-62486

CVE-2026-62486 affects Oracle Contracts Integration in Oracle E-Business Suite (component: Internal Operations) for supported 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Contracts Integration. Successful attacks require h...

CVE-2026-62484

CVE-2026-62484 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations). Supported affected versions: 12.2.3–12.2.15. The vulnerability, with CVSSv3.1 base score 5.9 (Integrity), can be exploited by an unauthenticated, network-accessible attacker over HTTP to cause unau...

CVE-2026-62483

The CVE-2026-62483 entry concerns Oracle E-Business Suite, specifically the Project Contracts product (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, leading to possible unauthorized u...

CVE-2026-62482

CVE-2026-62482 affects Oracle E-Business Suite – Oracle Public Sector Financials, Internal Operations component. Affected versions: 12.2.3 through 12.2.15. An attacker with network access over HTTP and low privileges can compromise data through unauthorized update/insert/delete and unauthorized r...

CVE-2026-62480

The CVE-2026-62480 entry covers a vulnerability in Oracle Public Sector Financials (Oracle E-Business Suite), specifically the Internal Operations component. Affected are versions 12.2.3 through 12.2.15. The description states that a low-privileged attacker with network access over HTTP can compr...

CVE-2026-62479

CVE-2026-62479 affects Oracle E-Business Suite, Oracle Public Sector Financials (Internal Operations) in the 12.2.3–12.2.15 range. The vulnerability is exploitable remotely over HTTP by a low-privilege attacker and requires user interaction. Successful attacks could lead to unauthorized update/in...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62476

CVE-2026-62476 affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue is described as easily exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover of Oracle Public Sect...

CVE-2026-62473

CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62474

CVE-2026-62474 is a vulnerability in Oracle E-Business Suite’s Oracle Lease and Finance Management product, specifically the Lease Authoring component. Affected versions are 12.2.3 through 12.2.15. The issue allows a low-privileged attacker with network access via HTTP to compromise the applicati...

CVE-2026-62468

CVE-2026-62468 affects Oracle E-Business Suite HR (Enterprise Command Center) with affected versions 12.2.14–12.2.15. The vulnerability is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation/modification/deletion of data or unauthorized data acce...

CVE-2026-62470

CVE-2026-62470 affects Oracle E-Business Suite’s Oracle Self-Service Human Resources, specifically the Manager Self-Service component, with affected versions 12.2.3–12.2.15. The vulnerability arises in this product’s Self-Service HR area and is exploitable over the network via HTTP by a low-privi...

CVE-2026-62469

The CVE-2026-62469 entry concerns Oracle E-Business Suite, Oracle Human Resources product (Enterprise Command Center) affecting 12.2.14–12.2.15. The vulnerability permits a low-privilege user with logon to the infrastructure running Oracle Human Resources to compromise the application, enabling u...

CVE-2026-62466

CVE-2026-62466 affects Oracle E-Business Suite Human Resources (Data Removal Tool) with affected 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle Human Resources, potentially taking over the resource. The CVSS v3.1 base score is ...

CVE-2026-62464

CVE-2026-62464 is a vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected are supported versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege user with network access via HTTP, potentially leading to takeover of Or...