CVE-2026-60931

The CVE-2026-60931 vulnerability affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) on versions 12.2.3–12.2.15. The issue allows a low-privilege, network-authenticated attacker to compromise Oracle Public Sector Financials via HTTP, with potential takeover and...

CVE-2026-60932

CVE-2026-60932 affects Oracle E-Business Suite’s Oracle Labor Distribution (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privilege, network-accessing attacker over HTTP to compromise Oracle Labor Distribution, potentially leading to takeover and impa...

CVE-2026-60927

CVE-2026-60927 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected: Oracle Public Sector Financials on 12.2.3–12.2.15. The issue can be exploited by a low-privileged user with network access via HTTP to take over the product. CVSS v3.1 base score 7.5 (C:H, I:H...

CVE-2026-60929

Oracle E-Business Suite Public Sector Financials (Internal Operations) versions 12.2.3–12.2.15 are affected by CVE-2026-60929. The vulnerability allows a low-privilege, unauthenticated or network-accessible attacker over HTTP to modify accessible data (update/insert/delete) in Oracle Public Secto...

CVE-2026-60930

CVE-2026-60930 affects Oracle E-Business Suite Public Sector Financials (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to read a subset of Oracle Public Sector Financials data. Root ...

CVE-2026-60924

CVE-2026-60924 affects Oracle E-Business Suite – Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege user with network access over HTTP to compromise Oracle Public Sector Payroll, with potential takeover as described. The CVS...

CVE-2026-60926

The CVE-2026-60926 entry affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a high-privileged attacker who can access over HTTP to compromise the Public Sector Payroll, potentially taking over the s...

CVE-2026-60925

CVE-2026-60925 affects Oracle E-Business Suite, Oracle Public Sector Payroll (Internal Operations) versions 12.2.4–12.2.15. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise the Oracle Public Sector Payroll component, potentially taking over the payrol...

CVE-2026-60920

The CVE-2026-60920 entry affects Oracle E-Business Suite, Oracle Customer Care (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to takeover of Oracle Customer Care. The CVSS 3.1 base ...

CVE-2026-60922

The CVE-2026-60922 entry concerns Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations). Affected: 12.2.3–12.2.15. The issue is exploitable by a low-privilege actor with network access over HTTP and can lead to unauthorized read access of a subset of iSupplier Portal data. The C...

CVE-2026-60923

CVE-2026-60923 affects Oracle Capacity (Internal Operations) in Oracle E-Business Suite, version 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with HTTP network access to compromise Oracle Capacity, potentially leading to unauthorized access to critical data or all data withi...

CVE-2026-60918

CVE-2026-60918 concerns Oracle E-Business Suite’s Shipping Execution (component: Internal Operations). Affected are Oracle E-Business Suite versions 12.2.12 through 12.2.15. The vulnerability enables a high-privilege attacker who can access the system over HTTP to compromise Oracle Shipping Execu...

CVE-2026-60917

CVE-2026-60917 affects Oracle Inventory Management in Oracle E-Business Suite Core Receiving for versions 12.2.3–12.2.15. The vulnerability is exploitable with network access over HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or modification of data, or complet...

CVE-2026-60919

CVE-2026-60919 affects Oracle E-Business Suite’s Oracle iSupplier Portal (Internal Operations) for the 12.2.3–12.2.15 range. The vulnerability allows an unauthenticated network attacker with HTTP access to bypass authentication and gain unauthorized read access to a subset of iSupplier Portal dat...

CVE-2026-60912

Summary of CVE-2026-60912 (Oracle E-Business Suite - Oracle Property Manager) Vulnerability affects Oracle Property Manager (Internal Operations) within Oracle E-Business Suite, impacting supported versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise...

CVE-2026-60913

Vulnerability CVE-2026-60913 affects Oracle E-Business Suite, Oracle Property Manager (Internal Operations) in versions 12.2.3–12.2.15. A high-privileged attacker with local access can compromise the Property Manager and gain unauthorized read access to a subset of its data. CVSSv3.1 base score i...

CVE-2026-60911

CVE-2026-60911 affects Oracle Property Manager within Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability resides in the Property Manager component (Internal Operations) and is exploitable by a low-privileged user over HTTP with network access; user interaction is required. Impact...

CVE-2026-60907

The CVE-2026-60907 entry concerns Oracle E-Business Suite, Oracle Installed Base, component: Create Item Instance. Affected versions are 12.2.4–12.2.15. The issue is exploitable with network access via HTTP by a low-privilege attacker, leading to unauthorized update/insert/delete of Oracle Instal...

CVE-2026-60910

This CVE concerns Oracle Property Manager in Oracle E-Business Suite (Internal Operations). Affected are supported 12.2.3–12.2.15 releases. The vulnerability is exploitable by a high-privilege attacker over HTTP network access and can lead to takeover of Oracle Property Manager, per CVSS 3.1 Base...

CVE-2026-60908

CVE-2026-60908 concerns Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance). Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker, potentially lead to unauthorized access to critica...