CVE-2026-61051

CVE-2026-61051 affects Oracle E-Business Suite, Concurrent Processing component BI Publisher Integration. Affects 12.2.3–12.2.15; vulnerability allows a low-privileged attacker with HTTP network access to perform unauthorized update/insert/delete and read operations on Oracle Concurrent Processin...

CVE-2026-61046

CVE-2026-61046 affects Oracle E-Business Suite, Oracle Production Scheduling (Internal Operations) in versions 12.2.3–12.2.15. The issue is exploitable by a high-privilege attacker with network access via HTTP to compromise Oracle Production Scheduling, with potential scope expansion impacting re...

CVE-2026-61048

CVE-2026-61048 targets Oracle Inventory Optimization (Oracle E-Business Suite), component: User Interface. Affected are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Inventory Optimization, potentially causing a partial denial o...

CVE-2026-61047

CVE-2026-61047 affects Oracle E-Business Suite’s Oracle Production Scheduling (Internal Operations). Affected versions are 12.2.3–12.2.15. The flaw allows a high-privileged attacker with local access to that infrastructure to compromise Oracle Production Scheduling, potentially enabling unauthori...

CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61044

The CVE-2026-61044 entry concerns Oracle E-Business Suite’s Production Scheduling (Internal Operations) with affected 12.2.3–12.2.15. An attacker with network access via HTTP and high privileges can potentially modify or delete data, read subset data, and cause partial denial of service in Oracle...

CVE-2026-61043

CVE-2026-61043 affects Oracle E-Business Suite Oracle Production Scheduling (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable locally: low privileges, user interaction required, and could lead to unauthorized creation/deletion/modification of data or un...

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...

CVE-2026-61036

This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...

CVE-2026-61035

CVE-2026-61035 affects Oracle E-Business Suite – Oracle Financials for the Americas (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker, with network access via HTTP, to compromise Oracle Financials for the Americas, potentially taking ...

CVE-2026-61030

Summary: CVE-2026-61030 affects Oracle E-Business Suite – Process Manufacturing Product Development (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation...

CVE-2026-61031

CVE-2026-61031 affects Oracle E-Business Suite Oracle Financials Common Country (Internal Operations) in versions 12.2.3–12.2.15. A low-privilege, network-access via HTTP attacker can compromise data, potentially creating/deleting/modifying critical data or gaining complete access to Oracle Finan...

CVE-2026-61028

CVE-2026-61028 affects Oracle E-Business Suite Inventory Management (Internal Operations) and is limited to versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege user with logon to the executing infrastructure and can lead to partial denial of service of Oracle Inventory M...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61026

CVE-2026-61026 affects Oracle iRecruitment within Oracle E-Business Suite, specifically versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized access to critical data or full access to Oracle iRecruitment...

CVE-2026-61025

CVE-2026-61025 affects Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) for supported versions 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise Oracle iRecruitment, potentially leading to takeover of ...

CVE-2026-61024

CVE-2026-61024 affects Oracle E-Business Suite’s iRecruitment (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-adjacent attacker (HTTP) to compromise iRecruitment, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61020

CVE-2026-61020 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) on versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over network access via HTTP, potentially leading to unauthorized creation, deletion or modification of d...

CVE-2026-61023

CVE-2026-61023 affects Oracle Inventory Management (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability enables a high-privilege local attacker with logon to the infrastructure where Oracle Inventory Management runs to compromise the component, potentially ...