CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61036

This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...

CVE-2026-61031

CVE-2026-61031 affects Oracle E-Business Suite Oracle Financials Common Country (Internal Operations) in versions 12.2.3–12.2.15. A low-privilege, network-access via HTTP attacker can compromise data, potentially creating/deleting/modifying critical data or gaining complete access to Oracle Finan...

CVE-2026-61030

Summary: CVE-2026-61030 affects Oracle E-Business Suite – Process Manufacturing Product Development (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized creation...

CVE-2026-61035

CVE-2026-61035 affects Oracle E-Business Suite – Oracle Financials for the Americas (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker, with network access via HTTP, to compromise Oracle Financials for the Americas, potentially taking ...

CVE-2026-61027

CVE-2026-61027 affects Oracle E-Business Suite, Oracle Cost Management (Inventory Costing) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a high-privilege attacker and can lead to takeover of Oracle Cost Management (CVSS v3.1 base score 7.2). The connected do...

CVE-2026-61025

CVE-2026-61025 affects Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) for supported versions 12.2.3–12.2.15. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise Oracle iRecruitment, potentially leading to takeover of ...

CVE-2026-61026

CVE-2026-61026 affects Oracle iRecruitment within Oracle E-Business Suite, specifically versions 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker over HTTP with network access, potentially leading to unauthorized access to critical data or full access to Oracle iRecruitment...

CVE-2026-61028

CVE-2026-61028 affects Oracle E-Business Suite Inventory Management (Internal Operations) and is limited to versions 12.2.3–12.2.15. The vulnerability is exploitable by a high-privilege user with logon to the executing infrastructure and can lead to partial denial of service of Oracle Inventory M...

CVE-2026-61020

CVE-2026-61020 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) on versions 12.2.3 through 12.2.15. The vulnerability is exploitable by a low-privileged attacker over network access via HTTP, potentially leading to unauthorized creation, deletion or modification of d...

CVE-2026-61023

CVE-2026-61023 affects Oracle Inventory Management (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability enables a high-privilege local attacker with logon to the infrastructure where Oracle Inventory Management runs to compromise the component, potentially ...

CVE-2026-61024

CVE-2026-61024 affects Oracle E-Business Suite’s iRecruitment (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privileged, network-adjacent attacker (HTTP) to compromise iRecruitment, potentially leading to unauthorized creation, deletion or modificatio...

CVE-2026-61019

CVE-2026-61019 affects Oracle E-Business Suite — Oracle Customers Online (Internal Operations) on versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, and potentia...

CVE-2026-61014

CVE-2026-61014 affects Oracle Inventory Management in Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, targeting Oracle Inventory Management and potentially i...

CVE-2026-61015

Oracle E-Business Suite Time and Labor (Internal Operations) is affected in versions 12.2.3–12.2.15. The CVE-2026-61015 vulnerability can be exploited remotely without authentication over HTTP to read a subset of data. CVSS v3.1 base score is 3.7 (Low) with Confidentiality impact=Low; other impac...

CVE-2026-61013

Oracle E-Business Suite Time and Labor vulnerability CVE-2026-61013 affects the Time and Labor component (Internal Operations) for EBS 12.2.3–12.2.15. A high-privileged attacker with network access over HTTP could compromise Time and Labor, potentially gaining unauthorized access to critical data...

CVE-2026-61012

Affected product/loc : Oracle Time and Labor, Oracle E-Business Suite; affected versions 12.2.3–12.2.15. Vulnerability : Internal Operations component vulnerable to exploitation via HTTP by a low-privilege, network-accessing attacker, enabling unauthorized create/delete/modify of data or partial ...

CVE-2026-61010

Oracle E-Business Suite’s Oracle Process Manufacturing Systems (Internal Operations) is affected in versions 12.2.3–12.2.15. The vulnerability allows a network-accessible, low-privileged attacker (via HTTP) to compromise the system, potentially leading to complete takeover (CVSS 3.1 base score 8....

CVE-2026-61009

CVE-2026-61009 concerns Oracle E-Business Suite’s Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The published description states a vulnerability that an attacker with high privileges can exploit over the network via HTTP to compromise Oracle P...

CVE-2026-61006

The CVE-2026-61006 affects Oracle E-Business Suite, Oracle Process Manufacturing Logistics (Internal Operations), with affected versions 12.2.3–12.2.15. The issue enables a high-privilege attacker who can reach the service over HTTP to take control of Oracle Process Manufacturing Logistics, per C...