375775 matches found
CVE-2026-62465
CVE-2026-62465 affects Oracle HRMS (US) within Oracle E-Business Suite, Internal Operations. Affected versions: 12.2.9–12.2.15. A low-privileged, logon-local attacker can cause a hang/crash (DOS), and perform unauthorized update/insert/delete and read access to Oracle HRMS data. Overall impact: c...
CVE-2026-62456
Summary (MODE C): The CVE-2026-62456 affects Oracle E-Business Suite, Oracle HRMS (UK) – Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTPS to compromise Oracle HRMS (UK), potentially leading to unauthorized...
CVE-2026-62453
CVE-2026-62453 affects Oracle HRMS (UK) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-attacker with HTTP access to perform unauthorized updates/inserts/deletes and read access, with a partial...
CVE-2026-62451
CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...
CVE-2026-62447
The CVE-2026-62447 vulnerability affects Oracle E-Business Suite, specifically the Oracle Trade Management product (Claim LOV). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over network access via HTTP, with potential confidentiality, integrit...
CVE-2026-62445
CVE-2026-62445 affects Oracle E-Business Suite’s Oracle Order Management (component: Product Diagnostic Tools). Affected versions are 12.2.4–12.2.15. The vulnerability is exploitable over the network with a low-privilege account via HTTP and can lead to unauthorized creation, deletion, or modific...
CVE-2026-61338
CVE-2026-61338 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations), in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit over HTTP to compromise data, enabling unauthorized creation, deletion or modification of critical data and bro...
CVE-2026-62444
CVE-2026-62444 describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration (Internal Operations) affecting 12.2.3–12.2.15. An unauthenticated, network-accessible attacker (HTTP) can exploit it, with user interaction required, to cause unauthorized update/insert/delete and ...
CVE-2026-62443
CVE-2026-62443 affects Oracle Contracts Integration in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise the component, with successful attacks requiring user interaction. Impacts include un...
CVE-2026-61335
CVE-2026-61335 affects Oracle E-Business Suite (Oracle Product Workbench, Internal Operations) with affected versions 12.2.3–12.2.15. The issue enables a low-privilege, network-accessible attacker (HTTP) to compromise data integrity and confidentiality. Exploitation details are not provided in th...
CVE-2026-61336
CVE-2026-61336 concerns Oracle E-Business Suite, Oracle Lease and Finance Management (component: Internal Operations), affected in versions 12.2.14–12.2.15. The NVD/NVD-derived description states an easily exploitable vulnerability that allows a high-privilege attacker with network access via HTT...
CVE-2026-61337
CVE-2026-61337 describes a vulnerability in Oracle E-Business Suite, Oracle Lease and Finance Management (Internal Operations) affecting versions 12.2.11–12.2.15. It can be exploited by a low-privileged, network-accessing attacker over HTTP to compromise the affected system, with potential takeov...
CVE-2026-61334
CVE-2026-61334 affects Oracle E-Business Suite — Price Protection (Internal Operations) versions 12.2.3 through 12.2.15. The vulnerability is exploitable over HTTP by a low-privileged, network-accessing attacker, leading to unauthorized creation, deletion, or modification of Oracle Price Protecti...
CVE-2026-61329
The CVE-2026-61329 entry affects Oracle E-Business Suite, specifically the Price Protection product (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege, network-accessing attacker and can lead to unauthorized creation, deletio...
CVE-2026-61333
CVE-2026-61333 affects Oracle E-Business Suite, Oracle Product Workbench component (Internal Operations) in versions 12.2.3–12.2.15. An attacker with low privileges who can access over HTTP can compromise Oracle Product Workbench, resulting in unauthorized creation, deletion or modification of da...
CVE-2026-61328
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2026-61327
CVE-2026-61327 affects Oracle E-Business Suite's Oracle Bills of Materials (component: Internal Operations) on supported 12.2.13–12.2.15. The vulnerability allows a low-privileged, unauthenticated (network access via HTTP) attacker to unauthorizedly create, delete, or modify critical data within ...
CVE-2026-61325
The CVE-2026-61325 entry concerns Oracle E-Business Suite, Oracle Advanced Benefits (component: Internal Operations), affected in version 12.2.15. The vulnerability enables a high-privileged attacker who can reach Oracle Advanced Benefits over the network via HTTP to compromise data and potential...
CVE-2026-61323
CVE-2026-61323 affects Oracle Advanced Benefits (Oracle E-Business Suite) with version 12.2.15 listed as affected. The vulnerability is exploitable with network access via HTTP by a low-privilege user, potentially leading to unauthorized access to sensitive data or data within Oracle Advanced Ben...
CVE-2026-61322
Summary (CVE-2026-61322) : Vulnerability in the TeleSales component (Internal Operations) of Oracle E-Business Suite . Affected products/versions: 12.2.3–12.2.15 . An attacker with low privileges, over the network, via HTTP, can exploit this to take over TeleSales, according to the NVD entry summ...