CVE-2026-61264

CVE-2026-61264 affects Oracle E-Business Suite’s Oracle Call Center Technology (RDBMS and UI) on versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network attacker with HTTP access to cause unauthorized update/insert/delete and read access to Oracle Call Center Technology data (...

CVE-2026-61257

Oracle iSupport (Oracle E-Business Suite) vulnerability CVE-2026-61257 affects the Call Back component in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker via HTTP can result in unauthorized update/insert/delete and read access to some iSupport data; CVSS 3.1 base score is 5...

CVE-2026-61260

CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...

CVE-2026-61261

CVE-2026-61261 affects the Oracle Knowledge Management component (User Interface) of Oracle E-Business Suite, versions 12.2.3–12.2.15. A low-privilege attacker with network access via HTTP can compromise Oracle Knowledge Management, leading to unauthorized update/insert/delete and read access to ...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-61254

CVE-2026-61254 affects Oracle E-Business Suite Oracle HRMS (Korea) Korean Payroll, versions 12.2.3–12.2.15. The vulnerability is in the Korean Payroll component and can be exploited over HTTP by an unauthenticated attacker, with user interaction required, to read and modify a subset of Oracle HRM...

CVE-2026-61255

The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...

CVE-2026-61251

CVE-2026-61251 affects Oracle E-Business Suite HRMS (Australia) Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-adjacent attacker with HTTP access to compromise HRMS Australia, potentially exposing unauthorized data. The CVSS 3.1 base score is 6...

CVE-2026-61252

CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...

CVE-2026-61253

CVE-2026-61253 affects Oracle HRMS (Japanese) within Oracle E-Business Suite; impacted are Oracle Payroll Japanese in versions 12.2.3–12.2.15. The vulnerability allows unauthenticated, network-accessible exploitation via HTTPS and requires user interaction to trigger. Successful exploitation can ...

CVE-2026-61249

CVE-2026-61249 affects Oracle E-Business Suite Oracle Learning Management (component: Import And Export) in versions 12.2.3 through 12.2.15. The flaw enables a low-privileged, network-accessible attacker (via HTTP) to access Oracle Learning Management data, as described in the CVE details and NVD...

CVE-2026-61247

CVE-2026-61247 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be triggered by an unauthenticated attacker who can access via SMTP over the network, enabling unauthorized update/ins...

CVE-2026-61250

CVE-2026-61250 affects Oracle E-Business Suite Oracle Payroll (component: Payroll). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, potentially leading to unauthorized access to Oracle Payroll data. CVSS 3.1 base sc...

CVE-2026-61244

The CVE concerns Oracle PeopleSoft Enterprise FIN Manufacturing Argentina (component: Manufacturing), affected in version 9.1. It describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized creation, deletion or modification of data, and unauthorized acc...

CVE-2026-61245

CVE-2026-61245 affects Oracle PeopleSoft Enterprise FIN Manufacturing Brazil (component: Integration) with version 9.1. An unauthenticated attacker over HTTPS could take over the system; CVSS 3.1 base 9.8. Exploitation details are not provided in the connected documents. Oracle's July 2026 Critic...

CVE-2026-61243

CVE-2026-61243 affects Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component: Staffing), with affected version 9.1. The vulnerability is exploitable over HTTP with network access by a low-privileged attacker and can lead to takeover of the system, per CVSS 3.1 base metrics (8.8, HI...

CVE-2026-61242

CVE-2026-61242 affects Oracle PeopleSoft FIN Common Objects Argentina (component: Staffing), with the affected version reported as 9.1. The vulnerability enables a low-privileged, unauthenticated attacker (network access over HTTP) to compromise the target, potentially enabling takeover of People...

CVE-2026-61240

The CVE-2026-61240 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects Argentina, specifically the eSettlements component, with affected version 9.1. The vulnerability allows an unauthenticated attacker with access to the physical network segment attached to the hardware hosting People...

CVE-2026-61239

CVE-2026-61239 : Vulnerability in Oracle PeopleSoft FIN Common Objects Argentina (component: eProcurement) affecting the 9.1 line. UNAUTHENTICATED attacker over HTTP can compromise data: create/delete/modify access to critical data, read subset, and cause partial DOS. CVSS 3.1 base score 9.9 (CRI...

CVE-2026-61238

The CVE-2026-61238 entry concerns Oracle PeopleSoft: FIN Common Objects Argentina, affected in the eProcurement component of PeopleSoft Enterprise FIN, version 9.1. The vulnerability is exploitable with network access over HTTP by an unauthenticated attacker, potentially leading to unauthorized c...