ES
Product
E-Business Suite
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch
Add E-Business Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60687 | 6.8 | Jul 21 | Vulnerability in the Oracle U.S Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61043 | 6.7 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60846 | 6.7 | Jul 21 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60775 | 6.7 | Jul 21 | Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61046 | 6.6 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83443 | 6.5 | Sep 15 | Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83433 | 6.5 | Sep 15 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62488 | 6.5 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61262 | 6.5 | Jul 21 | Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60843 | 6.5 | Jul 21 | Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60812 | 6.5 | Jul 21 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History) Affected: 12.2.3 through 12.2.15 |
| CVE-2023-22093 | 6.5 | Oct 17 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy) Affected: 12.2.3 through 12.2.12 |
| CVE-2026-62519 | 6.3 | Jul 21 | Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succession plan) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61279 | 6.3 | Jul 21 | Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61266 | 6.3 | Jul 21 | Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Organization) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60811 | 6.3 | Jul 21 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60697 | 6.3 | Jul 21 | Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60688 | 6.3 | Jul 21 | Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60587 | 6.3 | Jul 21 | Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Project Definition) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60573 | 6.3 | Jul 21 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60572 | 6.3 | Jul 21 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Web Service Provider) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62487 | 6.1 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62444 | 6.1 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60802 | 6.1 | Jul 21 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60685 | 6.1 | Jul 21 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2025-21489 | 6.1 | Jan 21 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping) Affected: 12.2.3 through 12.2.10 |
| CVE-2023-22076 | 6.1 | Oct 17 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.12 |
| CVE-2023-22035 | 6.1 | Jul 18 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module) Affected: 12.2.3 through 12.2.12 |
| CVE-2026-62484 | 5.9 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60801 | 5.9 | Jul 21 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 12.2 |
| CVE-2026-61264 | 5.4 | Jul 21 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61221 | 5.4 | Jul 21 | Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61200 | 5.4 | Jul 21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61083 | 5.4 | Jul 21 | Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61080 | 5.4 | Jul 21 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60957 | 5.4 | Jul 21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60571 | 5.4 | Jul 21 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60310 | 5.4 | Jul 21 | Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals) Affected: 12.2.3 through 12.2.15 |
| CVE-2025-50090 | 5.4 | Jul 15 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.14 |
| CVE-2023-21847 | 5.4 | Jan 18 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download) Affected: 12.2.3 through 12.2.12 |
| CVE-2017-3515 | 5.4 | Apr 24 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6 |
| CVE-2016-3524 | 5.4 | Jul 21 | Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect… Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2026-62517 | 5.3 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62490 | 5.3 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2019-2488 | 5.3 | Jan 16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2018-2934 | 5.3 | Jul 18 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload) Affected: 12.1.3 |
| CVE-2018-2873 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2872 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2867 | 5.3 | Apr 19 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7 |