Oracle E-Business Suite vulnerabilities

CVE-2026-47028 [HIGH] CWE-284 CVE-2026-47028: Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attac

CVE-2026-60686 [HIGH] CWE-284 CVE-2026-60686: Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: I Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle U.S. Federal Financials. Successful attacks of this vulnerabi

CVE-2026-60736 [HIGH] CWE-284 CVE-2026-60736: Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: D Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks of this vulnerability can

CVE-2026-60963 [HIGH] CWE-284 CVE-2026-60963: Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operati Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Treasury. Successful attacks of this vulnerability can result in unauthorize

CVE-2026-60749 [HIGH] CWE-284 CVE-2026-60749: Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operation Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attacks of this vulnerability can result in unauthorized cr

CVE-2026-60710 [HIGH] CWE-284 CVE-2026-60710: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Oper Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unaut

CVE-2026-61004 [HIGH] CWE-284 CVE-2026-61004: Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: In Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed Cost Management. Successful attacks of this vulnerabili

CVE-2026-60966 [HIGH] CWE-284 CVE-2026-60966: Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (compon Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks of thi

CVE-2026-62514 [HIGH] CWE-284 CVE-2026-62514: Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Regulatory Manageme

CVE-2026-60982 [HIGH] CWE-284 CVE-2026-60982: Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle US Federal Human Resources. Successful attacks of this vul

CVE-2026-61338 [HIGH] CWE-284 CVE-2026-61338: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerability

CVE-2026-60740 [HIGH] CWE-284 CVE-2026-60740: Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Management. Successful attacks of this vulnerability can result i

CVE-2026-46939 [HIGH] CWE-284 CVE-2026-46939: Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configure to Order. Successful attacks of this vulnerability

CVE-2026-46828 [HIGH] CWE-284 CVE-2026-46828: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operatio Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in unauthorized

CVE-2026-60810 [HIGH] CWE-306 CVE-2026-60810: Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (compo Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Supply Chain Trading Connector. Successful attacks

CVE-2026-60756 [HIGH] CWE-284 CVE-2026-60756: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellan Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can res

CVE-2026-60764 [HIGH] CWE-284 CVE-2026-60764: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. Successful attacks of this vulnera

CVE-2026-60840 [HIGH] CWE-284 CVE-2026-60840: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerabi

CVE-2026-60677 [HIGH] CWE-284 CVE-2026-60677: Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (compon Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Application Components. While the vulnerabil

CVE-2024-21277 [HIGH] CWE-863 CVE-2024-21277: Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (compon Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. Successful attacks of thi