CVE-2026-61322

Summary (CVE-2026-61322) : Vulnerability in the TeleSales component (Internal Operations) of Oracle E-Business Suite . Affected products/versions: 12.2.3–12.2.15 . An attacker with low privileges, over the network, via HTTP, can exploit this to take over TeleSales, according to the NVD entry summ...

CVE-2026-61315

The CVE affects Oracle E-Business Suite's Oracle EDI Gateway (EDI component). Affected are supported versions 12.2.3–12.2.15 . The flaw allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise the Oracle EDI Gateway, resulting in unauthorized read access to a s...

CVE-2026-61320

CVE-2026-61320 affects Oracle E‑Business Suite Payables (Internal Operations) in 12.2.8–12.2.15. The vulnerability is exploitable over HTTP with low privileges and can lead to takeover of Oracle Payables (CVSS v3.1 base 8.8). Oracle’s July 2026 CPU advisory contains the patches for this issue; ap...

CVE-2026-61316

The CVE affects Oracle EDI Gateway (EDI) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability, caused by insufficient access control, allows a low-privileged attacker with network access over HTTP to read a subset of Oracle EDI Gateway data. CVSS v3.1 base score 4.3 (Confidentia...

CVE-2026-61312

Affected product: Oracle E-Business Suite, Oracle Product Hub (Internal Operations) with versions 12.2.3–12.2.15. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Product Hub, potentially affecting additional products and enabling takeover of the hu...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61314

CVE-2026-61314 affects Oracle EDI Gateway within Oracle E-Business Suite, specifically the All Miscellaneous EDI Issues component, for supported 12.2.3–12.2.15 releases. The vulnerability is exploitable over HTTP with network access by a high-privilege attacker and can lead to takeover of the Ora...

CVE-2026-61303

The CVE-2026-61303 entry affects Oracle EDI Gateway (Oracle E-Business Suite, component: Internal Operations). Affected versions are 12.2.3 through 12.2.15. The issue allows a high-privilege attacker who can log on to the infrastructure where Oracle EDI Gateway runs to compromise the gateway, res...

CVE-2026-61309

CVE-2026-61309 affects Oracle E-Business Suite, specifically Oracle In-Memory Cost Management for Discrete Industries (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access, potentially leading t...

CVE-2026-61304

CVE-2026-61304 concerns Oracle Price Protection in Oracle E-Business Suite (Internal Operations) affected on 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to achieve unauthorized update/insert/delete and read access to Oracle Price Protection dat...

CVE-2026-61310

CVE-2026-61310 affects Oracle E-Business Suite’s Oracle Product Hub (component: Internal Operations) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, potentially creating, deleting or modifying data or gaining un...

CVE-2026-61301

CVE-2026-61301 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a network-exposed, low-privilege attacker (via HTTP) to compromise data integrity and confidentiality; impact on availabili...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61297

CVE-2026-61297 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access, potentially leading to unauthorized creation, deletion, or modification...

CVE-2026-61294

CVE-2026-61294 affects Oracle E-Business Suite: Oracle Common Applications Calendar, Calendar Synchronizations. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially update, insert, or delete data, read a subset of data, and cause a part...

CVE-2026-61292

CVE-2026-61292 affects Oracle U.S. Federal Financials in Oracle E-Business Suite (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker who can reach the system over HTTP to obtain unauthorized read access to a subset of Oracle U.S. Federal ...

CVE-2026-61287

Oracle E-Business Suite Process Manufacturing Systems (Internal Operations) is affected in 12.2.3–12.2.15. A low-privilege, unauthenticated attacker could leverage HTTP access to modify or delete data and access data unauthorizedly, with no availability impact, per CVSS 3.1 base score 8.1. The CV...

CVE-2026-61289

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Product Development product (Quality Management Specs) with affected version 12.2.15. The vulnerability is exploitable remotely over HTTP by a low-privileged user and can lead to takeover of Oracle Process Manu...

CVE-2026-61283

Summary: CVE-2026-61283 affects Oracle E-Business Suite, Oracle Bills of Materials (Web Services) in versions 12.2.3–12.2.15. An unauthenticated or low-privilege user with network access via HTTP can compromise data and service behavior, enabling unauthorized updates/inserts/deletes, unauthorized...

CVE-2026-61282

CVE-2026-61282 affects Oracle E-Business Suite Oracle Advanced Benefits, Self Service Benefits component, with vulnerable versions 12.2.4–12.2.15. The issue permits a network-based, low-privilege attacker over HTTP to obtain unauthorized update/insert/delete and read access to some Oracle Advance...