Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 2 of 23
CVE-2026-46827P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-05-28
CVE-2026-46827 [HIGH] CWE-269 CVE-2026-46827: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Mana
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of
nvd
CVE-2026-46826P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-05-28
CVE-2026-46826 [HIGH] CWE-306 CVE-2026-46826: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of
nvd
CVE-2026-83456P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83456 [HIGH] CWE-269 CVE-2026-83456: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerab
nvd
CVE-2026-60681P3HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60681 [HIGH] CWE-284 CVE-2026-60681: Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business
Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Regulatory Manageme
nvd
CVE-2026-70813P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70813 [HIGH] CWE-284 CVE-2026-70813: Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: In
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerabili
nvd
CVE-2026-70812P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70812 [HIGH] CWE-284 CVE-2026-70812: Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: In
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerabili
nvd
CVE-2026-62513P3HIGHCVSS 8.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62513 [HIGH] CWE-284 CVE-2026-62513: Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business
Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Regulatory Manageme
nvd
CVE-2026-47033P3HIGHCVSS 8.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-47033 [HIGH] CWE-284 CVE-2026-47033: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. While the vulnerability is in Oracle C
nvd
CVE-2026-60706P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60706 [HIGH] CWE-284 CVE-2026-60706: Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (comp
Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Inventory. Successful attacks o
nvd
CVE-2026-60708P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60708 [HIGH] CWE-284 CVE-2026-60708: Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (com
Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Financials. Successful attacks
nvd
CVE-2026-61005P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61005 [HIGH] CWE-284 CVE-2026-61005: Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp
Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Logistics. Successful attacks o
nvd
CVE-2026-70807P3HIGHCVSS 8.5≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70807 [HIGH] CWE-284 CVE-2026-70807: Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: In
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. While the vulnerability is in Oracle C
nvd
CVE-2026-70814P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70814 [HIGH] CWE-284 CVE-2026-70814: Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: In
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerab
nvd
CVE-2026-83432P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83432 [HIGH] CWE-284 CVE-2026-83432: Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can resul
nvd
CVE-2026-83428P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83428 [HIGH] CWE-284 CVE-2026-83428: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerab
nvd
CVE-2026-83429P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83429 [HIGH] CWE-284 CVE-2026-83429: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerab
nvd
CVE-2026-83455P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83455 [HIGH] CWE-284 CVE-2026-83455: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerab
nvd
CVE-2026-61031P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61031 [HIGH] CWE-284 CVE-2026-61031: Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Country. Successful attacks of this vulne
nvd
CVE-2026-60771P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60771 [HIGH] CWE-284 CVE-2026-60771: Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Su
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul. Su
nvd
CVE-2026-60857P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60857 [HIGH] CWE-284 CVE-2026-60857: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability
nvd