CVE-2026-61004

The CVE-2026-61004 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Landed Cost Management (Internal Operations) affecting versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges can compromise Oracle Landed Cost Management, potentially enabling un...

CVE-2026-60997

CVE-2026-60997 affects Oracle E-Business Suite Oracle Universal Work Queue (Non-Media Integration issues). Affects 12.2.3–12.2.15; reachable over HTTP with network access. Low-privileged attacker can compromise data secrecy and integrity (unauthorized create/delete/modify) for Oracle Universal Wo...

CVE-2026-60989

CVE-2026-60989 affects Oracle E-Business Suite’s Oracle Advanced Collections (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-authenticated attacker (HTTP) to compromise Oracle Advanced Collections, with potential takeover and impact to confiden...

CVE-2026-60988

CVE-2026-60988 affects Oracle E-Business Suite’s Oracle Project Portfolio Analysis (Internal Operations) with affected versions 12.2.3–12.2.15. A low-privilege attacker can access via HTTP over the network, potentially taking over Oracle Project Portfolio Analysis (CVSS 7.5, high impact: Confiden...

CVE-2026-60985

CVE-2026-60985 affects Oracle Project Portfolio Analysis (Oracle E-Business Suite) in the Internal Operations component for Oracle E-Business Suite versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the product, potentially enab...

CVE-2026-60987

CVE-2026-60987 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the affected project portfolio analysis component, potentially causin...

CVE-2026-60986

CVE-2026-60986 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations). Affected versions are 12.2.3–12.2.15. A low-privilege, network-accessible attacker (via HTTP) can modify or access critical data, per the description. The CVSS v3.1 base score is 8.1 (High) wi...

CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-60982

CVE-2026-60982 affects Oracle E-Business Suite US Federal Human Resources (component: Internal Operations). Affected are versions 12.2.3 through 12.2.15. The vulnerability is exploitable with network access via HTTP by a low-privileged attacker and can lead to unauthorized creation, deletion or m...

CVE-2026-60984

CVE-2026-60984 affects Oracle E-Business Suite, Oracle Project Portfolio Analysis (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability permits a low-privileged, unauthenticated attacker with network access via HTTP to modify or delete data or read a subset of data, indicating Conf...

CVE-2026-60972

The CVE-2026-60972 entry concerns Oracle E-Business Tax within Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15 for the Internal Operations component. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to unauthorized crea...

CVE-2026-60978

CVE-2026-60978 affects Oracle Scripting (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Scripting, potentially enabling unauthorized creation, deletion, or modification...

CVE-2026-60973

Oracle E-Business Tax in Oracle E-Business Suite (Internal Operations) is affected for versions 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege user who can log on to the infrastructure where Oracle E-Business Tax runs, potentially leading to takeover of Oracle E-Business Ta...

CVE-2026-60974

The CVE-2026-60974 entry corresponds to a vulnerability in the Oracle E-Business Tax component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged attacker who can access over HTTP, potentially leading to una...

CVE-2026-60963

CVE-2026-60963 affects Oracle Treasury (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The issue is actionable via network access over HTTP by a low-privilege user, leading to unauthorized creation, deletion, or modification of critical Oracle Treasury data, or full acc...

CVE-2026-60965

CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...

CVE-2026-60966

CVE-2026-60966 affects Oracle E-Business Suite’s Oracle Public Sector Human Resources (component: Regression Testing). Affected are 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access and can lead to unauthorized creation, deletion or modific...

CVE-2026-60960

CVE-2026-60960 describes a vulnerability in the Oracle SDP Number Portability component (Internal Operations) of Oracle E-Business Suite. Affected versions are 12.2.3 through 12.2.15. The issue is exploitable by a low-privileged user who can log on to the infrastructure where Oracle SDP Number Po...

CVE-2026-60962

CVE-2026-60962 affects Oracle Flow Manufacturing within Oracle E-Business Suite (versions 12.2.3–12.2.15). The vulnerability is in Internal Operations and can be triggered by a low-privileged user with network access over HTTP, requiring user interaction. Successful exploitation may allow unautho...

CVE-2026-60959

CVE-2026-60959 : Vulnerability in Oracle SDP Number Portability (Oracle E-Business Suite, Internal Operations). Affected: 12.2.3–12.2.15. Low-privilege, network-access attacker (via HTTP) can compromise data: unauthorized create/delete/modify of critical data or full access to all data. CVSS v3.1...