CVE-2026-61119

CVE-2026-61119 describes a vulnerability in Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll). Affected versions are 12.2.3–12.2.15. The issue is exploitable over HTTP with network access by a low-privilege attacker, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61117

The CVE-2026-61117 entry concerns Oracle E-Business Suite, Oracle HRMS (UK) specifically, with affected versions 12.2.8–12.2.15. The vulnerability is described as exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK), with potential broader impact on ...

CVE-2026-61116

Affected product: Oracle E-Business Suite, Oracle Application Object Library (Core). Vulnerable versions: 12.2.3 through 12.2.15. Issue: unauthenticated, network-accessible via HTTP attacker can potentially access or exfiltrate Oracle Application Object Library data. Root cause and exact exploit ...

CVE-2026-61120

CVE-2026-61120 affects Oracle HRMS (US) in Oracle E-Business Suite (Internal Operations). Affected versions: 12.2.3–12.2.15. Local, low-privilege logon can compromise Oracle HRMS (US) with potential takeover, impacting confidentiality, integrity, and availability (CVSS 7.0). No root-cause or fix ...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-61112

The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...

CVE-2026-61113

The CVE-2026-61113 entry affects Oracle E-Business Suite’s Oracle Application Object Library (Core) in versions 12.2.3–12.2.15. It can be exploited by an unauthenticated attacker over HTTP to compromise data, with confidentiality and integrity impacts (CVSS v3.1: 7.4, HIGH). The description notes...

CVE-2026-61114

CVE-2026-61114 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL) with the DB Privileges component in affected 12.2.3–12.2.15. The issue allows a low-privilege, network-accessible attacker (via HTTP) to compromise AOL and potentially take over the library. CVSS 3.1 base sco...

CVE-2026-61111

CVE-2026-61111 affects Oracle E-Business Suite’s Oracle Application Object Library (AOL) Core. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege user who can log on to the host where AOL runs to compromise AOL, with potential impact extending to related products (scope change...

CVE-2026-61109

CVE-2026-61109 concerns a vulnerability in Oracle MySQL: Server (Component: Server: JSON) and MySQL Cluster. Affected: MySQL Server 8.4.0–8.4.10, 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1. The vulnerability could be exploited by a low-privilege attacker with network acces...

CVE-2026-61110

Oracle E-Business Suite ADPatch in Oracle Applications DBA is affected (versions 12.2.3–12.2.15). An attacker with network access via HTTP and low privileges can compromise Oracle Applications DBA, potentially taking over it. CVSS v3.1 base score is 8.8 (Confidentiality, Integrity, Availability)....

CVE-2026-61106

CVE-2026-61106 affects Oracle GoldenGate, specifically the Config Service Executable. Affected versions are 23.4 through 23.26.2. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker, with potential for takeover of Oracle GoldenGate and impacts to confidentiality, in...

CVE-2026-61107

CVE-2026-61107 describes a vulnerability in Oracle Applications DBA (Oracle E-Business Suite Internal Operations) affecting 12.2.3–12.2.15. The issue can be exploited by a high-privilege attacker with network access over HTTP to compromise Oracle Applications DBA, potentially leading to take over...

CVE-2026-61108

CVE-2026-61108 concerns a vulnerability in Oracle MySQL’s GIS component affecting MySQL Server (9.7.0–9.7.1) and MySQL Cluster (9.7.0–9.7.1). The issue, described in the connected sources, can allow a low-privileged, network-attached attacker to cause a Hang or frequent crashes (complete DoS) of ...

CVE-2026-61105

The CVE-2026-61105 entry describes a vulnerability in Oracle Banking Trade Finance (Infrastructure) affecting Oracle Financial Services Applications, versions 14.6.0–14.8.0. The flaw enables a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation/modification/deleti...

CVE-2026-61104

An Oracle PeopleSoft vulnerability in the Enterprise CS Student Records product (component: Research Tracking) affects version 9.2.38. The issue can be exploited by an unauthenticated attacker over HTTP to cause unauthorized read access to a subset of PeopleSoft Enterprise CS Student Records data...

CVE-2026-61103

The CVE-2026-61103 affects Oracle PeopleSoft Enterprise CS Campus Community (PeopleSoft CS Campus Community) with the Security component, specifically version 9.2.38. The description indicates a vulnerability that is difficult to exploit but allows an unauthenticated attacker who has access to th...

CVE-2026-61101

CVE-2026-61101 affects Oracle MES for Process Manufacturing (Internal Operations) within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows unauthenticated network access via HTTP and requires user interaction, with potential for unauthorized read and write of Oracle MES d...

CVE-2026-61102

Vulnerability detail available for CVE-2026-61102 affecting Oracle Banking Trade Finance (Oracle Financial Services Applications) Infrastructure component. Affected versions are 14.6.0–14.8.0. The issue is exploitable over HTTP with network access by a low-privileged attacker, potentially allowin...

CVE-2026-61099

The CVE-2026-61099 entry concerns Oracle WebCenter Enterprise Capture (Client Bundle) with affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by a low-privilege, network-accessible attacker and can result in takeover of Oracle WebCenter Enterprise Capture. CVS...