CVE-2026-60859

CVE-2026-60859 affects Oracle E-Business Suite — Oracle Quoting (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Quoting and potentially takeover the component. The CVSS v3.1 base score is 7.5 (...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-60857

The CVE-2026-60857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration product (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw is exploitable by a low-privilege attacker with network access over HTTP, potentially leading t...

CVE-2026-60863

CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...

CVE-2026-60855

CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...

CVE-2026-60854

CVE-2026-60854 affects Oracle E-Business Suite, Oracle Quality (Internal Operations) with affected 12.2.3–12.2.15. The vulnerability allows network access via HTTP by a high-privilege attacker to compromise Oracle Quality, potentially accessing all Oracle Quality data, performing unauthorized upd...

CVE-2026-60852

CVE-2026-60852 affects Oracle E-Business Suite Oracle Lease and Finance Management (Internal Operations). Supported affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially creating, deleting, or...

CVE-2026-60847

CVE-2026-60847 describes a vulnerability in Oracle E-Business Suite, Oracle Order Entry (Internal Operations) affecting 12.2.3–12.2.15. An attacker with high privileges and local logon could compromise Order Entry, potentially enabling unauthorized update/insert/delete of accessible data and part...

CVE-2026-60848

Oracle E-Business Suite CVE-2026-60848 affects the Oracle Project Contracts component (Internal Operations) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privileged, unauthenticated attacker with network access over HTTP to compromise Oracle Project Contracts, potentially al...

CVE-2026-60846

CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...

CVE-2026-60845

CVE-2026-60845 concerns Oracle E-Business Suite’s Oracle Mobile Application Server (MWA General Bugs). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a high-privilege attacker over HTTP to compromise Oracle Mobile Application Server, potentially leading to takeover. C...

CVE-2026-60843

CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...

CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60842

CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...

CVE-2026-60840

The vulnerability CVE-2026-60840 affects Oracle Demand Signal Repository (ODEC) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged attacker with network access via SQL to compromise the repository, potentially leading to unauthorized creation,...

CVE-2026-60838

CVE-2026-60838 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) with affected versions 12.2.3–12.2.15. The CVE describes an easily exploitable vulnerability where a low-privilege, network-accessing attacker via HTTP can compromise Oracle Price Protection, potentially...

CVE-2026-60836

CVE-2026-60836 affects Oracle E-Business Suite, Oracle HCM Common Architecture (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Oracle HCM Common Architecture, with impacts to confidentiality, in...

CVE-2026-60837

CVE-2026-60837 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) in 12.2.3–12.2.15. A low-privilege user with local logon can compromise Oracle Price Protection, with potential unauthorized creation/deletion/modification of critical data and broader access to Oracle P...

CVE-2026-60835

CVE-2026-60835 affects Oracle E-Business Suite Price Protection (Internal Operations) in versions 12.2.3–12.2.15. The flaw allows a low-privileged attacker over HTTP with network access to compromise Oracle Price Protection, risking unauthorized access to sensitive data. Affected product: Oracle ...

CVE-2026-60834

CVE-2026-60834 affects Oracle Solaris 11.4 (Utility component). The issue allows a low-privileged, network-accessible attacker via RAD to gain unauthorized access to data and potentially modify data due to a confidentiality/integrity impact (CVSS 7.1, HIGH). The root cause is not explicitly descr...