CVE-2026-61285

CVE-2026-61285 affects Oracle E-Business Suite, Oracle Process Manufacturing Systems (OPMS) Internal Operations, with affected versions 12.2.11–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise OPMS and potentially take over the system. The CVS...

CVE-2026-61280

Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...

CVE-2026-61278

CVE-2026-61278 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged user with network access, enabling unauthorized read/update/insert/delete ...

CVE-2026-61277

CVE-2026-61277 affects Oracle E-Business Suite, Oracle Marketing (Audience) module. Affected versions: 12.2.3–12.2.15. Exploitation requires network access over HTTP by a low-privileged user, enabling unauthorized update/insert/delete and read of Oracle Marketing data, and partial denial of servi...

CVE-2026-61279

CVE-2026-61279 affects Oracle E-Business Suite Proposals (component: Proposals). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Proposals, potentially enabling unauthorized update/insert/delete and...

CVE-2026-61275

The CVE-2026-61275 affects Oracle E-Business Suite’s Oracle Product Hub (component: Role Based Security) in versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, gaining unauthorized update/insert/delete access, read access to a da...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-61271

The CVE-2026-61271 entry concerns Oracle E-Business Suite’s Oracle Document Management and Collaboration (Attachments), affected on versions 12.2.3–12.2.15. An unauthenticated attacker with network access over HTTP can read, update/insert/delete some data, and cause a partial Denial of Service in...

CVE-2026-61267

CVE-2026-61267 concerns the Oracle HCM Configuration Workbench (Oracle E-Business Suite) in the Spreadsheet Loading component. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP, enabling unauthorized u...

CVE-2026-61269

Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...

CVE-2026-61266

The vulnerability CVE-2026-61266 affects Oracle E-Business Suite, specifically the Oracle Supply Chain Globalization component Copy Inventory Organization. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged attacker with network access over HTTP to perform unauthorized update...

CVE-2026-61262

CVE-2026-61262 affects Oracle Teleservice within Oracle E-Business Suite, specifically the Service Diagnostics Scripts component. Affected versions are 12.2.3 through 12.215. The vulnerability allows an unauthenticated attacker with network access over HTTP to modify data (update/insert/delete) a...

CVE-2026-61264

CVE-2026-61264 affects Oracle E-Business Suite’s Oracle Call Center Technology (RDBMS and UI) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network attacker with HTTP access to cause unauthorized update/insert/delete and read access to Oracle Call Center Technology data (...

CVE-2026-61263

CVE-2026-61263 affects Oracle E-Business Suite, Oracle Scripting Admin, in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessing attacker over HTTP to gain unauthorized read and write access to Oracle Scripting data, with impact on confidentiality and integrity (CVS...

CVE-2026-61257

Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...

CVE-2026-61260

CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...

CVE-2026-61261

CVE-2026-61261 affects the Oracle Knowledge Management component (User Interface) of Oracle E-Business Suite, versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Knowledge Management, leading to unauthorized update/insert/delete and read access to ...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-61254

CVE-2026-61254 affects Oracle E-Business Suite Oracle HRMS (Korea) Korean Payroll, versions 12.2.3–12.2.15. The vulnerability is in the Korean Payroll component and can be exploited over HTTP by an unauthenticated attacker, with user interaction required, to read and modify a subset of Oracle HRM...

CVE-2026-61255

The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...