CVE-2026-62476

CVE-2026-62476 affects Oracle E-Business Suite’s Oracle Public Sector Payroll (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue is described as easily exploitable with network access over HTTP by a low-privileged attacker, potentially leading to takeover of Oracle Public Sect...

CVE-2026-62479

CVE-2026-62479 affects Oracle E-Business Suite, Oracle Public Sector Financials (Internal Operations) in the 12.2.3–12.2.15 range. The vulnerability is exploitable remotely over HTTP by a low-privilege attacker and requires user interaction. Successful attacks could lead to unauthorized update/in...

CVE-2026-62478

CVE-2026-62478 affects Oracle E-Business Suite’s Oracle Public Sector Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, potentially taking over Oracle Public Sector Fin...

CVE-2026-62472

The CVE-2026-62472 affects Oracle Installed Base in Oracle E-Business Suite (component: Create Item Instance) for versions 12.2.4–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized creation, deletion, or modification of critical Oracle Installed Base data,...

CVE-2026-62473

CVE-2026-62473 affects Oracle E-Business Suite Installed Base (component: Create Item Instance). Affected: 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Installed Base, enabling unauthorized creation, deletion or modification of critical data, u...

CVE-2026-62474

CVE-2026-62474 is a vulnerability in Oracle E-Business Suite’s Oracle Lease and Finance Management product, specifically the Lease Authoring component. Affected versions are 12.2.3 through 12.2.15. The issue allows a low-privileged attacker with network access via HTTP to compromise the applicati...

CVE-2026-62470

CVE-2026-62470 affects Oracle E-Business Suite’s Oracle Self-Service Human Resources, specifically the Manager Self-Service component, with affected versions 12.2.3–12.2.15. The vulnerability arises in this product’s Self-Service HR area and is exploitable over the network via HTTP by a low-privi...

CVE-2026-62469

The CVE-2026-62469 entry concerns Oracle E-Business Suite, Oracle Human Resources product (Enterprise Command Center) affecting 12.2.14–12.2.15. The vulnerability permits a low-privilege user with logon to the infrastructure running Oracle Human Resources to compromise the application, enabling u...

CVE-2026-62468

CVE-2026-62468 affects Oracle E-Business Suite HR (Enterprise Command Center) with affected versions 12.2.14–12.2.15. The vulnerability is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation/modification/deletion of data or unauthorized data acce...

CVE-2026-62465

CVE-2026-62465 affects Oracle HRMS (US) within Oracle E-Business Suite, Internal Operations. Affected versions: 12.2.9–12.2.15. A low-privileged, logon-local attacker can cause a hang/crash (DOS), and perform unauthorized update/insert/delete and read access to Oracle HRMS data. Overall impact: c...

CVE-2026-62464

CVE-2026-62464 is a vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected are supported versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege user with network access via HTTP, potentially leading to takeover of Or...

CVE-2026-62466

CVE-2026-62466 affects Oracle E-Business Suite Human Resources (Data Removal Tool) with affected 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise Oracle Human Resources, potentially taking over the resource. The CVSS v3.1 base score is ...

CVE-2026-62453

CVE-2026-62453 affects Oracle HRMS (UK) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-attacker with HTTP access to perform unauthorized updates/inserts/deletes and read access, with a partial...

CVE-2026-62456

Summary (MODE C): The CVE-2026-62456 affects Oracle E-Business Suite, Oracle HRMS (UK) – Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTPS to compromise Oracle HRMS (UK), potentially leading to unauthorized...

CVE-2026-62447

The CVE-2026-62447 vulnerability affects Oracle E-Business Suite, specifically the Oracle Trade Management product (Claim LOV). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over network access via HTTP, with potential confidentiality, integrit...

CVE-2026-62445

CVE-2026-62445 affects Oracle E-Business Suite’s Oracle Order Management (component: Product Diagnostic Tools). Affected versions are 12.2.4–12.2.15. The vulnerability is exploitable over the network with a low-privilege account via HTTP and can lead to unauthorized creation, deletion, or modific...

CVE-2026-62451

CVE-2026-62451 affects Oracle Work in Process within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.14–12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Work in Process, leading to unauthorized creation, deleti...

CVE-2026-61338

CVE-2026-61338 affects Oracle E-Business Suite, Oracle Contracts Integration (Internal Operations), in versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit over HTTP to compromise data, enabling unauthorized creation, deletion or modification of critical data and bro...

CVE-2026-62443

CVE-2026-62443 affects Oracle Contracts Integration in Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise the component, with successful attacks requiring user interaction. Impacts include un...

CVE-2026-62444

CVE-2026-62444 describes a vulnerability in Oracle E-Business Suite’s Oracle Contracts Integration (Internal Operations) affecting 12.2.3–12.2.15. An unauthenticated, network-accessible attacker (HTTP) can exploit it, with user interaction required, to cause unauthorized update/insert/delete and ...