CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60985

CVE-2026-60985 affects Oracle Project Portfolio Analysis (Oracle E-Business Suite) in the Internal Operations component for Oracle E-Business Suite versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the product, potentially enab...

CVE-2026-60986

CVE-2026-60986 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations). Affected versions are 12.2.3–12.2.15. A low-privilege, network-accessible attacker (via HTTP) can modify or access critical data, per the description. The CVSS v3.1 base score is 8.1 (High) wi...

CVE-2026-60987

CVE-2026-60987 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the affected project portfolio analysis component, potentially causin...

CVE-2026-60982

CVE-2026-60982 affects Oracle E-Business Suite US Federal Human Resources (component: Internal Operations). Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable with network access via HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or m...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...

CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60974

The CVE-2026-60974 entry corresponds to a vulnerability in the Oracle E-Business Tax component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged attacker who can access over HTTP, potentially leading to una...

CVE-2026-60978

CVE-2026-60978 affects Oracle Scripting (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Scripting, potentially enabling unauthorized creation, deletion, or modification...

CVE-2026-60973

Oracle E-Business Tax in Oracle E-Business Suite (Internal Operations) is affected for versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege user who can log on to the infrastructure where Oracle E-Business Tax runs, potentially leading to takeover of Oracle E-Business Ta...

CVE-2026-60972

The CVE-2026-60972 entry concerns Oracle E-Business Tax within Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15 for the Internal Operations component. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to unauthorized crea...

CVE-2026-60963

CVE-2026-60963 affects Oracle Treasury (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The issue is actionable via network access over HTTP by a low-privilege user, leading to unauthorized creation, deletion, or modification of critical Oracle Treasury data, or full acc...

CVE-2026-60966

CVE-2026-60966 affects Oracle E-Business Suite’s Oracle Public Sector Human Resources (component: Regression Testing). Affected are 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access and can lead to unauthorized creation, deletion or modific...

CVE-2026-60965

CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...

CVE-2026-60962

CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...

CVE-2026-60959

CVE-2026-60959 : Vulnerability in Oracle SDP Number Portability (Oracle E-Business Suite, Internal Operations). Affected: 12.2.3–12.2.15. Low-privilege, network-access attacker (via HTTP) can compromise data: unauthorized create/delete/modify of critical data or full access to all data. CVSS v3.1...

CVE-2026-60960

CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...

CVE-2026-60957

CVE-2026-60957 affects Oracle Transportation Execution in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged, network-accessible attacker via HTTP and requires user interaction; it can lead to unauthorized upda...

CVE-2026-60953

Oracle CVE-2026-60953 affects the Oracle Telecommunications Billing Integrator component of Oracle E-Business Suite, versions 12.2.3–12.2.15. It is exploitable over HTTP by a low-privilege, network-accessible attacker, potentially causing unauthorized creation/deletion/modification of data or bro...