CVE-2026-60901

An Oracle E-Business Suite CVE-2026-60901 affects Oracle Project Intelligence (Internal Operations) in versions 12.2.3–12.2.15. Root cause/impact: high-severity vulnerability allowing a network-based, low-privilege attacker over HTTP to take over Oracle Project Intelligence (CVSS 3.1: 8.8, C/H/I/...

CVE-2026-60898

CVE-2026-60898 affects Oracle E-Business Suite’s Oracle Warehouse Management (Internal Operations) with affected product versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Warehouse...

CVE-2026-60899

CVE-2026-60899 affects Oracle E-Business Suite’s Oracle HCM Configuration Workbench (Rapid Implementation) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged network attacker (HTTP) to access Oracle HCM Configuration Workbench data, with impact limited to confidentia...

CVE-2026-60896

CVE-2026-60896 affects Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege, local attacker with logon to the infrastructure where Oracle Work in Process runs, potentially caus...

CVE-2026-60897

CVE-2026-60897 affects Oracle E-Business Suite Payroll (Internal Operations component). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Payroll, potentially takeover of the payroll component. Base CVSS 3.1 ...

CVE-2026-60894

CVE-2026-60894 affects Oracle E-Business Suite’s Oracle Payroll (Internal Operations) for EBS versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Payroll, potentially leading to takeover of the payroll component. The CVSSv3...

CVE-2026-60893

The CVE-2026-60893 entry affects Oracle E-Business Suite, Oracle Payroll (Internal Operations) for versions 12.2.3–12.2.15. The issue is a local, low-privilege vulnerability that can allow compromise of Oracle Payroll; broader impact on related products is possible. CVSS v3.1 base score is 6.5 (C...

CVE-2026-60890

CVE-2026-60890 is a vulnerability in Oracle E-Business Suite’s Oracle Payroll (Internal Operations) affecting 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Payroll, potentially taking over the service. The description and scores are provided by ...

CVE-2026-60892

CVE-2026-60892 affects Oracle E-Business Suite HRMS Norway (Norway Payroll) with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privileged attacker with network access over HTTP to compromise Oracle HRMS Norway, potentially taking over the system. CVSSv3.1 base score is 6.6 (C/H/I/A...

CVE-2026-60891

CVE-2026-60891 affects Oracle Work in Process (Internal Operations) in Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a high-privilege attacker who has a logon to the infrastructure where Oracle WIP runs, potentially enabling unauthorized read...

CVE-2026-60886

CVE-2026-60886 affects Oracle E-Business Suite Oracle Work in Process (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Work in Process, requiring user interaction. Attacks can lead to unauthorized access ...

CVE-2026-60888

CVE-2026-60888 : In Oracle E-Business Suite, Oracle Work in Process (component: Internal Operations) on affected 12.2.3–12.2.15 versions is vulnerable. The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Work in Process, with potential unauthorized acces...

CVE-2026-60877

The CVE-2026-60877 entry concerns Oracle E-Business Suite, Oracle Trade Management, component Claim LOV, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Trade Management, potentially enabling unauthorized cr...

CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2026-60875

CVE-2026-60875 affects Oracle E-Business Suite Oracle Trade Management, component Claim LOV, with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Trade Management, enabling unauthorized create/delete/modify access to...

CVE-2026-60872

CVE-2026-60872 affects Oracle E-Business Suite — Oracle Order Management, specifically the Product Diagnostic Tools component, with affected versions 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Order Management, pote...

CVE-2026-60871

CVE-2026-60871 affects Oracle E-Business Suite Risk Management (Internal Operations) for versions 12.2.3–12.2.15. A low-privilege, network-accessible attacker via HTTP can compromise Oracle Risk Management, potentially enabling unauthorized create/delete/modify access to data or complete access t...

CVE-2026-60870

CVE-2026-60870 : Vulnerability in Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation). Affected: 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Advanced Pricing, leading to unauthorized access to data or full access to Oracle...

CVE-2026-60867

The CVE-2026-60867 vulnerability affects the Oracle E-Business Suite Oracle Advanced Pricing (component: Pricing Installation). Affected versions are 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Pricing, enabling unauthorized creation, del...

CVE-2026-60868

CVE-2026-60868 affects Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation) for versions 12.2.14–12.2.15. The vulnerability, exploitable with low privileges over HTTP, can compromise Oracle Advanced Pricing and may affect related products, potentially granting unauthorized acce...