CVE-2026-60870

CVE-2026-60870 : Vulnerability in Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation). Affected: 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Advanced Pricing, leading to unauthorized access to data or full access to Oracle...

CVE-2026-60867

The CVE-2026-60867 vulnerability affects the Oracle E-Business Suite Oracle Advanced Pricing (component: Pricing Installation). Affected versions are 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Pricing, enabling unauthorized creation, del...

CVE-2026-60868

CVE-2026-60868 affects Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation) for versions 12.2.14–12.2.15. The vulnerability, exploitable with low privileges over HTTP, can compromise Oracle Advanced Pricing and may affect related products, potentially granting unauthorized acce...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60857

The CVE-2026-60857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration product (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw is exploitable by a low-privilege attacker with network access over HTTP, potentially leading t...

CVE-2026-60863

CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-60859

CVE-2026-60859 affects Oracle E-Business Suite — Oracle Quoting (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Quoting and potentially takeover the component. The CVSS v3.1 base score is 7.5 (...

CVE-2026-60855

CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...

CVE-2026-60854

CVE-2026-60854 affects Oracle E-Business Suite, Oracle Quality (Internal Operations) with affected 12.2.3–12.2.15. The vulnerability allows network access via HTTP by a high-privilege attacker to compromise Oracle Quality, potentially accessing all Oracle Quality data, performing unauthorized upd...

CVE-2026-60852

CVE-2026-60852 affects Oracle E-Business Suite Oracle Lease and Finance Management (Internal Operations). Supported affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially creating, deleting, or...

CVE-2026-60847

CVE-2026-60847 describes a vulnerability in Oracle E-Business Suite, Oracle Order Entry (Internal Operations) affecting 12.2.3–12.2.15. An attacker with high privileges and local logon could compromise Order Entry, potentially enabling unauthorized update/insert/delete of accessible data and part...

CVE-2026-60848

Oracle E-Business Suite CVE-2026-60848 affects the Oracle Project Contracts component (Internal Operations) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privileged, unauthenticated attacker with network access over HTTP to compromise Oracle Project Contracts, potentially al...

CVE-2026-60846

CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...

CVE-2026-60843

CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...

CVE-2026-60844

CVE-2026-60844 affects Oracle E-Business Suite Oracle Customer Support (Update Service Request) with affected versions 12.2.3–12.2.15. An unauthenticated or low-privilege attacker with network access over HTTP can compromise Oracle Customer Support, enabling unauthorized creation/deletion/modific...

CVE-2026-60845

CVE-2026-60845 concerns Oracle E-Business Suite’s Oracle Mobile Application Server (MWA General Bugs). Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a high-privilege attacker over HTTP to compromise Oracle Mobile Application Server, potentially leading to takeover. C...

CVE-2026-60838

CVE-2026-60838 affects Oracle E-Business Suite, Oracle Price Protection (Internal Operations) with affected versions 12.2.3–12.2.15. The CVE describes an easily exploitable vulnerability where a low-privilege, network-accessing attacker via HTTP can compromise Oracle Price Protection, potentially...

CVE-2026-60840

The vulnerability CVE-2026-60840 affects Oracle Demand Signal Repository (ODEC) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The issue enables a low-privileged attacker with network access via SQL to compromise the repository, potentially leading to unauthorized creation,...

CVE-2026-60842

CVE-2026-60842 affects Oracle Knowledge Management (Oracle E-Business Suite) component Search, with affected versions 12.2.5–12.2.15. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management; exploitation requires human interactio...