CVE-2026-61014

CVE-2026-61014 affects Oracle Inventory Management in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, targeting Oracle Inventory Management and potentially i...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61015

Oracle E-Business Suite Time and Labor (Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-61015 vulnerability can be exploited remotely without authentication over HTTP to read a subset of data. CVSS v3.1 base score is 3.7 (Low) with Confidentiality impact=Low; other impac...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-61012

Affected product/loc : Oracle Time and Labor, Oracle E-Business Suite; affected versions 12.2.3–12.2.15. Vulnerability : Internal Operations component vulnerable to exploitation via HTTP by a low-privilege, network-accessing attacker, enabling unauthorized create/delete/modify of data or partial ...

CVE-2026-61010

Oracle E-Business Suite’s Oracle Process Manufacturing Systems (Internal Operations) is affected in versions 12.2.3–12.2.15. The vulnerability allows a network-accessible, low-privileged attacker (via HTTP) to compromise the system, potentially leading to complete takeover (CVSS 3.1 base score 8....

CVE-2026-61009

CVE-2026-61009 concerns Oracle E-Business Suite’s Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The published description states a vulnerability that an attacker with high privileges can exploit over the network via HTTP to compromise Oracle P...

CVE-2026-61005

CVE-2026-61005 concerns Oracle E-Business Suite Oracle Process Manufacturing Logistics (Internal Operations) across affected AppServer versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to compromise data integrity and confidentiality, potentia...

CVE-2026-61006

The CVE-2026-61006 affects Oracle E-Business Suite, Oracle Process Manufacturing Logistics (Internal Operations), with affected versions 12.2.3–12.2.15. The issue enables a high-privilege attacker who can reach the service over HTTP to take control of Oracle Process Manufacturing Logistics, per C...

CVE-2026-60999

CVE-2026-60999 affects Oracle Data Integrator (part of Oracle Fusion Middleware) with REST service in version 14.1.2.0.0. The vulnerability is exploitable over HTTPS by an unauthenticated network attacker, potentially leading to takeover of Oracle Data Integrator. The CVSS 3.1 base score is 9.8 (...

CVE-2026-61004

The CVE-2026-61004 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Landed Cost Management (Internal Operations) affecting versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Landed Cost Management, potentially enabling un...

CVE-2026-61000

CVE-2026-61000 affects Oracle Process Manufacturing Systems within Oracle E-Business Suite (component: Internal Operations). Affected are EBS versions 12.2.3 through 12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially leading to unauthorized...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60997

CVE-2026-60997 affects Oracle E-Business Suite Oracle Universal Work Queue (Non-Media Integration issues). Affects 12.2.3–12.2.15; reachable over HTTP with network access. Low-privileged attacker can compromise data secrecy and integrity (unauthorized create/delete/modify) for Oracle Universal Wo...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60987

CVE-2026-60987 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the affected project portfolio analysis component, potentially causin...

CVE-2026-60985

CVE-2026-60985 affects Oracle Project Portfolio Analysis (Oracle E-Business Suite) in the Internal Operations component for Oracle E-Business Suite versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the product, potentially enab...

CVE-2026-60986

CVE-2026-60986 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations). Affected versions are 12.2.3–12.2.15. A low-privilege, network-accessible attacker (via HTTP) can modify or access critical data, per the description. The CVSS v3.1 base score is 8.1 (High) wi...

CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...