Oracle E-Business Suite vulnerabilities

CVE-2026-61125 [HIGH] CWE-200 CVE-2026-61125: Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configure to Order. While the vulnerability is in Oracle Con

CVE-2026-60683 [HIGH] CWE-284 CVE-2026-60683: Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Regulatory Manageme

CVE-2024-21088 [HIGH] CWE-444 CVE-2024-21088: Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Imp Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Import Utility). Supported versions that are affected are 12.2.4-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability can

CVE-2026-62495 [HIGH] CWE-284 CVE-2026-62495: Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Sui Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Process Execution. Successf

CVE-2026-62493 [HIGH] CWE-269 CVE-2026-62493: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in take

CVE-2024-21270 [HIGH] CWE-863 CVE-2024-21270: Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (compone Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks of this vulnerability

CVE-2026-61331 [HIGH] CWE-284 CVE-2026-61331: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. While the vulnerability is in Orac

CVE-2023-21849 [HIGH] CWE-284 CVE-2023-21849: Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java uti Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in una

CVE-2026-62518 [HIGH] CWE-200 CVE-2026-62518: Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Int Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Production Scheduling. Successful attacks of this vulnerability

CVE-2014-4278 [HIGH] CVE-2014-4278: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.

CVE-2018-2804 [HIGH] CVE-2018-2804: Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomp Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Suc

CVE-2004-0385 [CRITICAL] CVE-2004-0385: Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0 Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, al

CVE-2026-62540 [HIGH] CWE-284 CVE-2026-62540: Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Plan Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in ta

CVE-2026-60926 [HIGH] CWE-284 CVE-2026-60926: Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks of this vulnerabilit

CVE-2026-60925 [HIGH] CWE-269 CVE-2026-60925: Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Int Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks of this vulnerabilit

CVE-2026-60845 [HIGH] CWE-284 CVE-2026-60845: Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vulnera

CVE-2026-61006 [HIGH] CWE-269 CVE-2026-61006: Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Logistics. Successful attacks

CVE-2026-61101 [HIGH] CWE-284 CVE-2026-61101: Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (compon Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. Successful attacks requ

CVE-2026-61009 [HIGH] CWE-284 CVE-2026-61009: Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Logistics. While the vulnera

CVE-2026-83481 [HIGH] CWE-269 CVE-2026-83481: Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operat Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeove