CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61044

The CVE-2026-61044 entry concerns Oracle E-Business Suite’s Production Scheduling (Internal Operations) with affected 12.2.3–12.2.15. An attacker with network access via HTTP and high privileges can potentially modify or delete data, read subset data, and cause partial denial of service in Oracle...

CVE-2026-61043

CVE-2026-61043 affects Oracle E-Business Suite Oracle Production Scheduling (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable locally: low privileges, user interaction required, and could lead to unauthorized creation/deletion/modification of data or un...

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...

CVE-2026-61036

This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...

CVE-2026-61035

CVE-2026-61035 affects Oracle E-Business Suite – Oracle Financials for the Americas (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker, with network access via HTTP, to compromise Oracle Financials for the Americas, potentially taking ...

CVE-2026-61030

Summary: CVE-2026-61030 affects Oracle E-Business Suite – Process Manufacturing Product Development (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation...

CVE-2026-61031

CVE-2026-61031 affects Oracle E-Business Suite Oracle Financials Common Country (Internal Operations) in versions 12.2.3–12.2.15. A low-privilege, network-access via HTTP attacker can compromise data, potentially creating/deleting/modifying critical data or gaining complete access to Oracle Finan...

CVE-2026-61028

CVE-2026-61028 affects Oracle E-Business Suite Inventory Management (Internal Operations) and is limited to versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege user with logon to the executing infrastructure and can lead to partial denial of service of Oracle Inventory M...

CVE-2026-61025

CVE-2026-61025 affects Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) for supported versions 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise Oracle iRecruitment, potentially leading to takeover of ...

CVE-2026-61026

CVE-2026-61026 affects Oracle iRecruitment within Oracle E-Business Suite, specifically versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized access to critical data or full access to Oracle iRecruitment...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61023

CVE-2026-61023 affects Oracle Inventory Management (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability enables a high-privilege local attacker with logon to the infrastructure where Oracle Inventory Management runs to compromise the component, potentially ...

CVE-2026-61024

CVE-2026-61024 affects Oracle E-Business Suite’s iRecruitment (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-adjacent attacker (HTTP) to compromise iRecruitment, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61020

CVE-2026-61020 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) on versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over network access via HTTP, potentially leading to unauthorized creation, deletion or modification of d...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61014

CVE-2026-61014 affects Oracle Inventory Management in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, targeting Oracle Inventory Management and potentially i...

CVE-2026-61015

Oracle E-Business Suite Time and Labor (Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-61015 vulnerability can be exploited remotely without authentication over HTTP to read a subset of data. CVSS v3.1 base score is 3.7 (Low) with Confidentiality impact=Low; other impac...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...