PT-2026-92639

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description An issue exists in the Command Line - RapidClone component of the Oracle Applications Manager. An unauthenticated attacker with network access via...

PT-2026-92634

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Marketing versions 12.2.3 through 12.2.15 Description A flaw in the Audience component of the Oracle Marketing product allows an unauthenticated attacker with network access via HTTP to compromise the system. Thi...

PT-2026-92642

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Applications DBA versions 12.2.3 through 12.2.15 Description A flaw exists in the AD Utilities component of the Applications DBA product. A low privileged attacker with access to the infrastructure where Applications DB...

PT-2026-92661

Name of the Vulnerable Software and Affected Versions Oracle Spares Management versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of the Oracle Spares Management product allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-92699

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Common Applications versions 12.2.3 through 12.2.15 Description A flaw exists in the CRM User Management Framework component of Oracle Common Applications. A high privileged attacker with network access via HTTP...

PT-2026-92656

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15 Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access,...

CVE-2026-83205: Improper Access Control

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83141: Improper Access Control

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

PT-2026-92934

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts. Successfu...

PT-2026-92989

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Purchasing product allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

CVE-2026-87165: Improper Privilege Management

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

PT-2026-92691

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Manager versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Diagnostics Interfaces component of the Oracle Applications Manager allows a low privileged attacker with network access via...

CVE-2026-83490: Improper Access Control

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Whil...

CVE-2026-83331: Improper Privilege Management

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83482: Improper Privilege Management

Vulnerability in the Oracle Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successf...

CVE-2026-83428: Improper Access Control

Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand...

PT-2026-92850

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.3 through 12.2.15 Description A flaw exists in the Personalization component of the Oracle Applications Framework. A high privileged attacker with network access via HTTP can...

CVE-2026-83132: Improper Access Control

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2026-83162: Improper Access Control

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Application...

CVE-2026-83084: Improper Access Control

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. While the vulnerabili...