Oracle Contract Lifecycle Management for Public Sector security vulnerabilities

Oracle Contract Lifecycle Management for the public sector versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Award/PO component, and they could allow low-privilege attackers to take control of Oracle Contract Lifecycle Management for the...

CVE-2026-87149

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...