CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60926

The CVE-2026-60926 entry affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker who can access over HTTP to compromise the Public Sector Payroll, potentially taking over the s...

CVE-2026-60925

CVE-2026-60925 affects Oracle E-Business Suite, Oracle Public Sector Payroll (Internal Operations) versions 12.2.4–12.2.15. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise the Oracle Public Sector Payroll component, potentially taking over the payrol...

CVE-2026-60920

The CVE-2026-60920 entry affects Oracle E-Business Suite, Oracle Customer Care (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Customer Care. The CVSS 3.1 base ...

CVE-2026-60922

The CVE-2026-60922 entry concerns Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations). Affected: 12.2.3–12.2.15. The issue is exploitable by a low-privilege actor with network access over HTTP and can lead to unauthorized read access of a subset of iSupplier Portal data. The C...

CVE-2026-60923

CVE-2026-60923 affects Oracle Capacity (Internal Operations) in Oracle E-Business Suite, version 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with HTTP network access to compromise Oracle Capacity, potentially leading to unauthorized access to critical data or all data withi...

CVE-2026-60918

CVE-2026-60918 concerns Oracle E-Business Suite’s Shipping Execution (component: Internal Operations). Affected are Oracle E-Business Suite versions 12.2.12 through 12.2.15. The vulnerability enables a high-privilege attacker who can access the system over HTTP to compromise Oracle Shipping Execu...

CVE-2026-60917

CVE-2026-60917 affects Oracle Inventory Management in Oracle E-Business Suite Core Receiving for versions 12.2.3–12.2.15. The vulnerability is exploitable with network access over HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of data, or complet...

CVE-2026-60919

CVE-2026-60919 affects Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations) for the 12.2.3–12.2.15 range. The vulnerability allows an unauthenticated network attacker with HTTP access to bypass authentication and gain unauthorized read access to a subset of iSupplier Portal dat...

CVE-2026-60912

Summary of CVE-2026-60912 (Oracle E-Business Suite - Oracle Property Manager) Vulnerability affects Oracle Property Manager (Internal Operations) within Oracle E-Business Suite, impacting supported versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise...

CVE-2026-60911

CVE-2026-60911 affects Oracle Property Manager within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability resides in the Property Manager component (Internal Operations) and is exploitable by a low-privileged user over HTTP with network access; user interaction is required. Impact...

CVE-2026-60913

Vulnerability CVE-2026-60913 affects Oracle E-Business Suite, Oracle Property Manager (Internal Operations) in versions 12.2.3–12.2.15. A high-privileged attacker with local access can compromise the Property Manager and gain unauthorized read access to a subset of its data. CVSSv3.1 base score i...

CVE-2026-60907

The CVE-2026-60907 entry concerns Oracle E-Business Suite, Oracle Installed Base, component: Create Item Instance. Affected versions are 12.2.4–12.2.15. The issue is exploitable with network access via HTTP by a low-privilege attacker, leading to unauthorized update/insert/delete of Oracle Instal...

CVE-2026-60910

This CVE concerns Oracle Property Manager in Oracle E-Business Suite (Internal Operations). Affected are supported 12.2.3–12.2.15 releases. The vulnerability is exploitable by a high-privilege attacker over HTTP network access and can lead to takeover of Oracle Property Manager, per CVSS 3.1 Base...

CVE-2026-60908

CVE-2026-60908 concerns Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially lead to unauthorized access to critica...

CVE-2026-60900

CVE-2026-60900 affects Oracle E-Business Suite’s HCM Configuration Workbench (Rapid Implementation) . Affected versions: 12.2.3–12.2.15 . The vulnerability can be exploited by a high-privilege attacker with network access via HTTP to gain takeover of the HCM Configuration Workbench. CVSS v3.1 bas...

CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60904

The CVE-2026-60904 entry applies to Oracle E-Business Suite, Oracle Installed Base product, component Create Item Instance. Affected are EBS versions 12.2.3–12.2.15. The vulnerability is exploitable over the network via HTTP by a low-privileged attacker, potentially leading to unauthorized creati...

CVE-2026-60897

CVE-2026-60897 affects Oracle E-Business Suite Payroll (Internal Operations component). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Payroll, potentially takeover of the payroll component. Base CVSS 3.1 ...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...