CVE-2026-61251

CVE-2026-61251 affects Oracle E-Business Suite HRMS (Australia) Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-adjacent attacker with HTTP access to compromise HRMS Australia, potentially exposing unauthorized data. The CVSS 3.1 base score is 6...

CVE-2026-61253

CVE-2026-61253 affects Oracle HRMS (Japanese) within Oracle E-Business Suite; impacted are Oracle Payroll Japanese in versions 12.2.3–12.2.15. The vulnerability allows unauthenticated, network-accessible exploitation via HTTPS and requires user interaction to trigger. Successful exploitation can ...

CVE-2026-61252

CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...

CVE-2026-61247

CVE-2026-61247 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be triggered by an unauthenticated attacker who can access via SMTP over the network, enabling unauthorized update/ins...

CVE-2026-61249

CVE-2026-61249 affects Oracle E-Business Suite Oracle Learning Management (component: Import And Export) in versions 12.2.3 through 12.2.15. The flaw enables a low-privileged, network-accessible attacker (via HTTP) to access Oracle Learning Management data, as described in the CVE details and NVD...

CVE-2026-61250

CVE-2026-61250 affects Oracle E-Business Suite Oracle Payroll (component: Payroll). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to Oracle Payroll data. CVSS 3.1 base sc...

CVE-2026-61245

CVE-2026-61245 affects Oracle PeopleSoft Enterprise FIN Manufacturing Brazil (component: Integration) with version 9.1. An unauthenticated attacker over HTTPS could take over the system; CVSS 3.1 base 9.8. Exploitation details are not provided in the connected documents. Oracle's July 2026 Critic...

CVE-2026-61244

The CVE concerns Oracle PeopleSoft Enterprise FIN Manufacturing Argentina (component: Manufacturing), affected in version 9.1. It describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion or modification of data, and unauthorized acc...

CVE-2026-61240

The CVE-2026-61240 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically the eSettlements component, with affected version 9.1. The vulnerability allows an unauthenticated attacker with access to the physical network segment attached to the hardware hosting People...

CVE-2026-61243

CVE-2026-61243 affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component: Staffing), with affected version 9.1. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and can lead to takeover of the system, per CVSS 3.1 base metrics (8.8, HI...

CVE-2026-61242

CVE-2026-61242 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Staffing), with the affected version reported as 9.1. The vulnerability enables a low-privileged, unauthenticated attacker (network access over HTTP) to compromise the target, potentially enabling takeover of People...

CVE-2026-61237

Summary: CVE-2026-61237 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Integration) with affected version 9.1. An unauthenticated, network-accessible attacker over HTTP can compromise data, gain unauthorized access to critical data, perform unauthorized updates/deletes, and ca...

CVE-2026-61238

The CVE-2026-61238 entry concerns Oracle PeopleSoft: FIN Common Objects Argentina, affected in the eProcurement component of PeopleSoft Enterprise FIN, version 9.1. The vulnerability is exploitable with network access over HTTP by an unauthenticated attacker, potentially leading to unauthorized c...

CVE-2026-61239

CVE-2026-61239 : Vulnerability in Oracle PeopleSoft FIN Common Objects Argentina (component: eProcurement) affecting the 9.1 line. UNAUTHENTICATED attacker over HTTP can compromise data: create/delete/modify access to critical data, read subset, and cause partial DOS. CVSS 3.1 base score 9.9 (CRI...

CVE-2026-61235

CVE-2026-61235 affects Oracle PeopleSoft: HCM Global Payroll Switzerland (component: Global Payroll for Switzerland) with affected version 9.2. The vulnerability is exploitable with network access via HTTP by a high-privileged attacker and can lead to takeover of the PeopleSoft Enterprise HCM Glo...

CVE-2026-61236

CVE-2026-61236 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil ( Staffing component) with affected version 9.1. The vulnerability allows an unauthenticated attacker over HTTP to access PeopleSoft data, potentially leading to unauthorized data access or full access to accessible dat...

CVE-2026-61234

CVE-2026-61234 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: eProcurement), with affected version 9.1. Affected in unauthenticated, network-accessible via HTTP; impacts include unauthorized create/delete/modify of data and full data access (C/H I/H A:N). The root caus...

CVE-2026-61233

CVE-2026-61233 affects Oracle PeopleSoft, specifically the FIN Common Objects Brazil product’s Integration component (version 9.1). The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise the system, with potential takeover of PeopleSoft Enterprise FIN Co...

CVE-2026-61232

CVE-2026-61232 affects Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) with affected version 9.1. An unauthenticated attacker with network access via HTTP can compromise data. The provided documents do not specify a remediation or patch version.

CVE-2026-61226

Summary of CVE-2026-61226 (Oracle) : A vulnerability in Oracle Communications Converged Application Server, component RTP Proxy, affects version 8.3. The issue allows a high-privileged attacker who can log into the infrastructure running the server to compromise the application server, with poten...