CVE-2026-60877

The CVE-2026-60877 entry concerns Oracle E-Business Suite, Oracle Trade Management, component Claim LOV, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Trade Management, potentially enabling unauthorized cr...

CVE-2026-60880

CVE-2026-60880 relates to Oracle Work in Process in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables an unauthenticated attacker with network access over HTTP to compromise Oracle Work in Process, with potential takeover and...

CVE-2026-60875

CVE-2026-60875 affects Oracle E-Business Suite Oracle Trade Management, component Claim LOV, with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Trade Management, enabling unauthorized create/delete/modify access to...

CVE-2026-60872

CVE-2026-60872 affects Oracle E-Business Suite — Oracle Order Management, specifically the Product Diagnostic Tools component, with affected versions 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Order Management, pote...

CVE-2026-60871

CVE-2026-60871 affects Oracle E-Business Suite Risk Management (Internal Operations) for versions 12.2.3–12.2.15. A low-privilege, network-accessible attacker via HTTP can compromise Oracle Risk Management, potentially enabling unauthorized create/delete/modify access to data or complete access t...

CVE-2026-60870

CVE-2026-60870 : Vulnerability in Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation). Affected: 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Advanced Pricing, leading to unauthorized access to data or full access to Oracle...

CVE-2026-60867

The CVE-2026-60867 vulnerability affects the Oracle E-Business Suite Oracle Advanced Pricing (component: Pricing Installation). Affected versions are 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Pricing, enabling unauthorized creation, del...

CVE-2026-60868

CVE-2026-60868 affects Oracle E-Business Suite, Oracle Advanced Pricing (Pricing Installation) for versions 12.2.14–12.2.15. The vulnerability, exploitable with low privileges over HTTP, can compromise Oracle Advanced Pricing and may affect related products, potentially granting unauthorized acce...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-60857

The CVE-2026-60857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration product (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw is exploitable by a low-privilege attacker with network access over HTTP, potentially leading t...

CVE-2026-60863

CVE-2026-60863 affects Oracle E-Business Suite: Oracle Advanced Pricing (Pricing Installation) in versions 12.2.3–12.2.15. The vulnerability allows an attacker with network access via HTTP and low privileges to compromise Oracle Advanced Pricing, potentially taking over the module. The issue is r...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-60859

CVE-2026-60859 affects Oracle E-Business Suite — Oracle Quoting (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Quoting and potentially takeover the component. The CVSS v3.1 base score is 7.5 (...

CVE-2026-60855

CVE-2026-60855 : Vulnerability in Oracle Quality (Oracle E-Business Suite Internal Operations). Affected: 12.2.3–12.2.15. Description: a low-privilege user with network access over HTTP can compromise Oracle Quality, potentially leading to takeover. CVSS v3.1 base score 7.5 (HIGH) with impacts to...

CVE-2026-60854

CVE-2026-60854 affects Oracle E-Business Suite, Oracle Quality (Internal Operations) with affected 12.2.3–12.2.15. The vulnerability allows network access via HTTP by a high-privilege attacker to compromise Oracle Quality, potentially accessing all Oracle Quality data, performing unauthorized upd...

CVE-2026-60852

CVE-2026-60852 affects Oracle E-Business Suite Oracle Lease and Finance Management (Internal Operations). Supported affected versions are 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker over HTTP to compromise the product, potentially creating, deleting, or...

CVE-2026-60847

CVE-2026-60847 describes a vulnerability in Oracle E-Business Suite, Oracle Order Entry (Internal Operations) affecting 12.2.3–12.2.15. An attacker with high privileges and local logon could compromise Order Entry, potentially enabling unauthorized update/insert/delete of accessible data and part...

CVE-2026-60848

Oracle E-Business Suite CVE-2026-60848 affects the Oracle Project Contracts component (Internal Operations) in versions 12.2.3 through 12.2.15. The vulnerability enables a low-privileged, unauthenticated attacker with network access over HTTP to compromise Oracle Project Contracts, potentially al...

CVE-2026-60846

CVE-2026-60846 affects Oracle E-Business Suite’s Oracle Mobile Application Server, specifically the MWA Terminal Server component. Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable remotely over HTTP by a high-privilege attacker, potentially leading to unauthorized da...

CVE-2026-60843

CVE-2026-60843 affects Oracle Citizen Interaction Center in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise the Oracle Citizen Interaction Center, with po...