E-business Suite vulnerabilities

106 known vulnerabilities in E-business Suite from Oracle. 106 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Oracle Financials for the Americas: Improper Access Control

  CVE-2026-61035Jul 21, 2026Oracle

  Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network

• 8.1 High severity

  Oracle Financials Common Country: Improper Access Control

  CVE-2026-61031Jul 21, 2026Oracle

  Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acc

• 8.0 High severity

  Oracle Process Manufacturing Logistics: Improper Access Control

  CVE-2026-61009Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with ne

• 7.2 High severity

  Oracle Process Manufacturing Logistics: Improper Privilege Management

  CVE-2026-61006Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with netw

• 8.1 High severity

  Oracle Process Manufacturing Logistics: Improper Access Control

  CVE-2026-61005Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 8.1 High severity

  Oracle Landed Cost Management: Improper Access Control

  CVE-2026-61004Jul 21, 2026Oracle

  Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.1 High severity

  Oracle US Federal Human Resources: Improper Access Control

  CVE-2026-60982Jul 21, 2026Oracle

  Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network ac

• 8.1 High severity

  Oracle Public Sector Human Resources: Improper Access Control

  CVE-2026-60966Jul 21, 2026Oracle

  Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network

• 8.1 High severity

  Oracle Treasury: Improper Access Control

  CVE-2026-60963Jul 21, 2026Oracle

  Vulnerability in the Oracle Treasury product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 8.8 High severity

  Oracle Transportation Execution: Improper Privilege Management

  CVE-2026-60952Jul 21, 2026Oracle

  Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.8 High severity

  Oracle Labor Distribution: Improper Privilege Management

  CVE-2026-60932Jul 21, 2026Oracle

  Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.2 High severity

  Oracle Public Sector Payroll: Improper Access Control

  CVE-2026-60926Jul 21, 2026Oracle

  Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 7.2 High severity

  Oracle Public Sector Payroll: Improper Privilege Management

  CVE-2026-60925Jul 21, 2026Oracle

  Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 8.8 High severity

  Oracle Public Sector Payroll: Improper Privilege Management

  CVE-2026-60924Jul 21, 2026Oracle

  Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.1 High severity

  Oracle Contracts Integration: Improper Access Control

  CVE-2026-60857Jul 21, 2026Oracle

  Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.2 High severity

  Oracle Mobile Application Server: Improper Access Control

  CVE-2026-60845Jul 21, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network acces

• 8.1 High severity

  Oracle Demand Signal Repository: Improper Access Control

  CVE-2026-60840Jul 21, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.2 High severity

  Oracle Supply Chain Trading Connector: Missing Authentication for Critical Functionality

  CVE-2026-60810Jul 21, 2026Oracle

  Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with net

• 7.1 High severity

  Oracle Compensation Workbench: Improper Access Control

  CVE-2026-60800Jul 21, 2026Oracle

  Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acc

• 7.1 High severity

  Oracle Compensation Workbench: Improper Access Control

  CVE-2026-60799Jul 21, 2026Oracle

  Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acc

• 7.1 High severity

  Oracle Financials Common Modules: Improper Access Control

  CVE-2026-60772Jul 21, 2026Oracle

  Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle Complex Maintenance, Repair and Overhaul: Improper Access Control

  CVE-2026-60771Jul 21, 2026Oracle

  Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker w

• 8.1 High severity

  Oracle Financials Common Modules: Improper Access Control

  CVE-2026-60764Jul 21, 2026Oracle

  Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle EDI Gateway: Improper Access Control

  CVE-2026-60756Jul 21, 2026Oracle

  Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

• 7.2 High severity

  Oracle Assets: Improper Access Control

  CVE-2026-60755Jul 21, 2026Oracle

  Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to co

• 8.1 High severity

  Oracle Assets: Improper Access Control

  CVE-2026-60749Jul 21, 2026Oracle

  Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to com

• 8.1 High severity

  Oracle Cash Management: Improper Access Control

  CVE-2026-60740Jul 21, 2026Oracle

  Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.1 High severity

  Oracle E-Business Intelligence: Improper Access Control

  CVE-2026-60736Jul 21, 2026Oracle

  Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

• 8.1 High severity

  Oracle EDI Gateway: Improper Access Control

  CVE-2026-60710Jul 21, 2026Oracle

  Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t

• 8.1 High severity

  Oracle Process Manufacturing Financials: Improper Access Control

  CVE-2026-60708Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw

• 8.1 High severity

  Oracle Process Manufacturing Inventory: Improper Access Control

  CVE-2026-60706Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 8.1 High severity

  Oracle U.S. Federal Financials: Improper Access Control

  CVE-2026-60686Jul 21, 2026Oracle

  Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.7 High severity

  Oracle Process Manufacturing Regulatory…: Improper Access Control

  CVE-2026-60683Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

• 8.8 High severity

  Oracle Process Manufacturing Regulatory…: Improper Access Control

  CVE-2026-60681Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

• 8.8 High severity

  Oracle General Ledger: Improper Privilege Management

  CVE-2026-60678Jul 21, 2026Oracle

  Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SOA

• 8.4 High severity

  Oracle Common Application Components: Improper Access Control

  CVE-2026-60677Jul 21, 2026Oracle

  Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with net

• 7.2 High severity

  Oracle Project Costing: Improper Privilege Management

  CVE-2026-60340Jul 21, 2026Oracle

  Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 8.5 High severity

  Oracle Contracts Integration: Improper Access Control

  CVE-2026-47033Jul 21, 2026Oracle

  Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle Document Management and Collaboration: Improper Access Control

  CVE-2026-47028Jul 21, 2026Oracle

  Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network

• 8.1 High severity

  Oracle Configure to Order: Improper Access Control

  CVE-2026-46939Jun 17, 2026Oracle

  Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce