CVE-2026-61061

CVE-2026-61061 affects Oracle JDeveloper (Oracle Fusion Middleware) in the Security Framework. Affected are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege, logon-authenticated attacker to compromise Oracle JDeveloper, potentially taking over the application. CVSS...

CVE-2026-61059

CVE-2026-61059 affects Oracle PeopleSoft (Enterprise SCM Order Management) 9.2 in the Security component. The vulnerability, exploitable via HTTP with network access and no authentication, can lead to unauthorized creation, deletion, or modification of data and potentially complete access to acce...

CVE-2026-61057

Technical details for CVE-2026-61057 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, impact, or fixes are disclosed here. Monitor Oracle advisories and NVD updates for new information.

CVE-2026-61056

CVE-2026-61056 concerns Oracle PeopleSoft Enterprise FIN Grants (component: Grants) with affected version 9.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise FIN Grants, potentially performing unauthorized updates, inserts, or deletes on accessib...

CVE-2026-61055

The CVE-2026-61055 vulnerability affects Oracle PeopleSoft, specifically the SCM Order Management component (Security) in the 9.2 line. Affected: PeopleSoft Enterprise SCM Order Management. Root cause details are not provided beyond the vulnerability’s existence. Impact per the entry: high confid...

CVE-2026-61053

CVE-2026-61053 affects Oracle Communications BRM - Elastic Charging Engine (Diameter Gateway and SDK). Affected versions: 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, 15.2.0.0.0. The vulnerability can be exploited by a low-privilege user who can log on to the infrastructure where the BRM engine runs, pote...

CVE-2026-61052

CVE-2026-61052 is a vulnerability in Oracle Solaris 11.4 (Filesystems component). The description states a local, low-privilege attacker with logon can compromise Solaris, potentially causing a hang or complete denial of service. The CVSSv3.1 base score is 5.5 (Availability impact). Connected sou...

CVE-2026-61051

CVE-2026-61051 affects Oracle E-Business Suite, Concurrent Processing component BI Publisher Integration. Affects 12.2.3–12.2.15; vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update/insert/delete and read operations on Oracle Concurrent Processin...

CVE-2026-61050

CVE-2026-61050 affects Oracle Production Scheduling (Oracle E-Business Suite UI), with affected versions 12.2.3–12.2.15. The vulnerability permits a low-privilege attacker with HTTP access to compromise the product, potentially resulting in unauthorized access to sensitive data. MITRE/attack deta...

CVE-2026-61049

CVE-2026-61049 affects Oracle Production Scheduling (Oracle E-Business Suite, Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker with access to the hardware-attached physical network segment; exploitation requires user int...

CVE-2026-61046

CVE-2026-61046 affects Oracle E-Business Suite, Oracle Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. The issue is exploitable by a high-privilege attacker with network access via HTTP to compromise Oracle Production Scheduling, with potential scope expansion impacting re...

CVE-2026-61048

CVE-2026-61048 targets Oracle Inventory Optimization (Oracle E-Business Suite), component: User Interface. Affected are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Inventory Optimization, potentially causing a partial denial o...

CVE-2026-61047

CVE-2026-61047 affects Oracle E-Business Suite’s Oracle Production Scheduling (Internal Operations). Affected versions are 12.2.3–12.2.15. The flaw allows a high-privileged attacker with local access to that infrastructure to compromise Oracle Production Scheduling, potentially enabling unauthori...

CVE-2026-61043

CVE-2026-61043 affects Oracle E-Business Suite Oracle Production Scheduling (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable locally: low privileges, user interaction required, and could lead to unauthorized creation/deletion/modification of data or un...

CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61044

The CVE-2026-61044 entry concerns Oracle E-Business Suite’s Production Scheduling (Internal Operations) with affected 12.2.3–12.2.15. An attacker with network access via HTTP and high privileges can potentially modify or delete data, read subset data, and cause partial denial of service in Oracle...

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61036

This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...

CVE-2026-61035

CVE-2026-61035 affects Oracle E-Business Suite – Oracle Financials for the Americas (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker, with network access via HTTP, to compromise Oracle Financials for the Americas, potentially taking ...