Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

EUVD-2026-106446

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-106447

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-106407

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-87407

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-87408

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-87366

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-87408

A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite , specifically within the Personalization component. Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, which requires human interac...

CVE-2026-87407

A vulnerability exists in the Security component of the Oracle Applications Framework product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can compromise the framework, though successful exploitation requires human interaction...

CVE-2026-87366

A vulnerability exists in the Web Utilities component of the Oracle Applications Framework product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Applications Fra...

Oracle E-Business Suite: CVE-2026-87366: Critical Patch Update

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119684

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

Oracle E-Business Suite: CVE-2026-87408: Critical Patch Update

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

Oracle E-Business Suite: CVE-2026-87407: Critical Patch Update

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119722

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Security. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-119723

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle Applications Framework input validation error vulnerability

Versions 12.2.3 through 12.2.15 of the Oracle Applications Framework contain an input validation error vulnerability. This vulnerability stems from issues within the Security component and may allow unauthenticated attackers to gain access via HTTP on user interaction, thereby gaining unauthorize...

Oracle E-Business Suite (September 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions...