CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-60948

CVE-2026-60948 affects Oracle Learning Management, part of Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Oracle Learning Management, potentially causing unauthorized creation, deletion,...

CVE-2026-60950

CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...

CVE-2026-60952

CVE-2026-60952 affects Oracle Transportation Execution within Oracle E-Business Suite (component: Internal Operations). Affects supported versions 12.2.3–12.2.15. An attacker with low privileges on the network can exploit HTTP access to compromise Oracle Transportation Execution, potentially taki...

CVE-2026-60942

The CVE-2026-60942 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine) in versions 12.2.3–12.2.15. It enables a low-privileged, network-authenticated attacker (HTTP) to potentially create/modify/delete critical data or access all data via the Fulfillment Mana...

CVE-2026-60945

CVE-2026-60945 affects Oracle E-Business Suite’s Oracle Learning Management (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker who can access over HTTP to compromise Oracle Learning Management, requiring user interaction. Impact include...

CVE-2026-60943

The CVE-2026-60943 affects Oracle E-Business Suite, specifically the Oracle Service Fulfillment Manager component (Fulfillment Engine) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to take over the Oracle Service Fulfillme...

CVE-2026-60940

CVE-2026-60940 affects Oracle E-Business Suite, Oracle Service Contracts (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a high-privileged attacker with network access via HTTP and requires user interaction. Impact: unauthorized creation, deletion,...

CVE-2026-60941

Summary: CVE-2026-60941 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine). Affected versions are 12.2.3–12.2.15. The flaw is exploitable over a network via HTTP by a user with high privileges, enabling unauthorized creation, deletion or modification of crit...

CVE-2026-60939

The CVE-2026-60939 entry concerns Oracle E-Business Suite’s Oracle Project Contracts (Internal Operations). Affects versions 12.2.3–12.2.15; a low-privileged user with network access via HTTP can access unauthorized data read from Oracle Project Contracts. CVSS 3.1 base score is 3.1 (Confidential...

CVE-2026-60937

CVE-2026-60937 affects Oracle E-Business Suite Labor Distribution, Internal Operations component. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to perform unauthorized updates, inserts, or deletions on Oracle Lab...

CVE-2026-60936

The CVE-2026-60936 entry concerns Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected releases 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker who can access over HTTP, potentially causing partial denial of service to Oracle Labor...

CVE-2026-60938

CVE-2026-60938 affects Oracle Labor Distribution (Internal Operations) in Oracle E-Business Suite, Versions 12.2.3–12.2.15. The root cause is not explicitly described beyond the vulnerable surface; the flaw can allow a high-privilege attacker with local logon to compromise Oracle Labor Distributi...

CVE-2026-60931

The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...

CVE-2026-60932

CVE-2026-60932 affects Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privilege, network-accessing attacker over HTTP to compromise Oracle Labor Distribution, potentially leading to takeover and impa...

CVE-2026-60930

CVE-2026-60930 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to read a subset of Oracle Public Sector Financials data. Root ...

CVE-2026-60927

CVE-2026-60927 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected: Oracle Public Sector Financials on 12.2.3–12.2.15. The issue can be exploited by a low-privileged user with network access via HTTP to take over the product. CVSS v3.1 base score 7.5 (C:H, I:H...

CVE-2026-60929

Oracle E-Business Suite Public Sector Financials (Internal Operations) versions 12.2.3–12.2.15 are affected by CVE-2026-60929. The vulnerability allows a low-privilege, unauthenticated or network-accessible attacker over HTTP to modify accessible data (update/insert/delete) in Oracle Public Secto...

CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60926

The CVE-2026-60926 entry affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker who can access over HTTP to compromise the Public Sector Payroll, potentially taking over the s...