CVE-2026-83443: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Assets product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attac...

CVE-2026-87154: Improper Access Control

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

CVE-2026-79425

An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/onlineupload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...

PT-2026-92977

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92984

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS India versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of Oracle HRMS India. A low privileged attacker with network access via HTTP can compromise the system,...

PT-2026-92983

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HRMS India versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle HRMS India product. A low privileged attacker with network access via HTTPS can compromise...

PT-2026-92615

Name of the Vulnerable Software and Affected Versions Oracle Field Service versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Field Service product within Oracle E-Business Suite. A low privileged attacker with network access via HTTP ca...

PT-2026-92660

Name of the Vulnerable Software and Affected Versions Oracle Spares Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Spares Management product allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-92646

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Report Manager versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Report Manager allows a low privileged attacker with network access via HTTPS to compromise the...

PT-2026-92684

Vulnerability in the Oracle Project Intelligence product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...

PT-2026-92711

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair...

PT-2026-92976

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92653

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Sales versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Sales allows a low privileged attacker with network access via HTTP to compromise the system. This issue can...

CVE-2026-83438: Improper Access Control

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Whil...

PT-2026-92911

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92907

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92908

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92909

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub...

PT-2026-92905

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Whil...

PT-2026-92910

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Assets versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Assets product. A low privileged attacker with network access via HTTP can exploit this flaw t...