CVE-2026-61301

CVE-2026-61301 affects Oracle E-Business Suite, Oracle Process Manufacturing Financials (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a network-exposed, low-privilege attacker (via HTTP) to compromise data integrity and confidentiality; impact on availabili...

CVE-2026-61299

CVE-2026-61299 affects Oracle E-Business Suite's Oracle Process Manufacturing Logistics (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability enables a low-privilege attacker with network access over HTTP to compromise the PM Logistics data, potentially leading to unautho...

CVE-2026-61294

CVE-2026-61294 affects Oracle E-Business Suite: Oracle Common Applications Calendar, Calendar Synchronizations. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can potentially update, insert, or delete data, read a subset of data, and cause a part...

CVE-2026-61297

CVE-2026-61297 affects Oracle E-Business Suite, Oracle Customers Online (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged attacker with network access, potentially leading to unauthorized creation, deletion, or modification...

CVE-2026-61292

CVE-2026-61292 affects Oracle U.S. Federal Financials in Oracle E-Business Suite (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker who can reach the system over HTTP to obtain unauthorized read access to a subset of Oracle U.S. Federal ...

CVE-2026-61289

The CVE affects Oracle E-Business Suite, specifically the Oracle Process Manufacturing Product Development product (Quality Management Specs) with affected version 12.2.15. The vulnerability is exploitable remotely over HTTP by a low-privileged user and can lead to takeover of Oracle Process Manu...

CVE-2026-61287

Oracle E-Business Suite Process Manufacturing Systems (Internal Operations) is affected in 12.2.3–12.2.15. A low-privilege, unauthenticated attacker could leverage HTTP access to modify or delete data and access data unauthorizedly, with no availability impact, per CVSS 3.1 base score 8.1. The CV...

CVE-2026-61283

Summary: CVE-2026-61283 affects Oracle E-Business Suite, Oracle Bills of Materials (Web Services) in versions 12.2.3–12.2.15. An unauthenticated or low-privilege user with network access via HTTP can compromise data and service behavior, enabling unauthorized updates/inserts/deletes, unauthorized...

CVE-2026-61285

CVE-2026-61285 affects Oracle E-Business Suite, Oracle Process Manufacturing Systems (OPMS) Internal Operations, with affected versions 12.2.11–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise OPMS and potentially take over the system. The CVS...

CVE-2026-61282

CVE-2026-61282 affects Oracle E-Business Suite Oracle Advanced Benefits, Self Service Benefits component, with vulnerable versions 12.2.4–12.2.15. The issue permits a network-based, low-privilege attacker over HTTP to obtain unauthorized update/insert/delete and read access to some Oracle Advance...

CVE-2026-61279

CVE-2026-61279 affects Oracle E-Business Suite Proposals (component: Proposals). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Proposals, potentially enabling unauthorized update/insert/delete and...

CVE-2026-61277

CVE-2026-61277 affects Oracle E-Business Suite, Oracle Marketing (Audience) module. Affected versions: 12.2.3–12.2.15. Exploitation requires network access over HTTP by a low-privileged user, enabling unauthorized update/insert/delete and read of Oracle Marketing data, and partial denial of servi...

CVE-2026-61278

CVE-2026-61278 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged user with network access, enabling unauthorized read/update/insert/delete ...

CVE-2026-61280

Oracle CVE-2026-61280 describes a vulnerability in Oracle Sales for Handhelds (Outlook Sync Win 32) within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can cause unauthorized updates/inserts/deletes and reads, plus a pa...

CVE-2026-61271

The CVE-2026-61271 entry concerns Oracle E-Business Suite’s Oracle Document Management and Collaboration (Attachments), affected on versions 12.2.3–12.2.15. An unauthenticated attacker with network access over HTTP can read, update/insert/delete some data, and cause a partial Denial of Service in...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-61275

The CVE-2026-61275 affects Oracle E-Business Suite’s Oracle Product Hub (component: Role Based Security) in versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, gaining unauthorized update/insert/delete access, read access to a da...

CVE-2026-61266

The vulnerability CVE-2026-61266 affects Oracle E-Business Suite, specifically the Oracle Supply Chain Globalization component Copy Inventory Organization. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged attacker with network access over HTTP to perform unauthorized update...

CVE-2026-61267

CVE-2026-61267 concerns the Oracle HCM Configuration Workbench (Oracle E-Business Suite) in the Spreadsheet Loading component. Affected versions are 12.2.3 through 12.2.15. The vulnerability is exploitable by an unauthenticated attacker who can access the system over HTTP, enabling unauthorized u...

CVE-2026-61269

Vulnerability CVE-2026-61269 affects Oracle E-Business Suite, Oracle Product Workbench WebUI (versions 12.2.3–12.2.15). A low-privileged, unauthenticated attacker can exploit over HTTP to gain unauthorized update/insert/delete and read access to Oracle Product Workbench data, plus partial denial ...