CVE-2026-97078

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078

The Client Invoicing by Sprout Invoices WordPress plugin versions

CVE-2026-97078 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

CVE-2026-97078: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Client Invoicing by Sprout Invoices = 20.8.17 versions...

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by gueco in WordPress Plugin Client Invoicing by Sprout Invoices versions = 20.8.17...

CVE-2026-87168

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87167

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...

EUVD-2026-79782

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

PT-2026-92991

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.10 through 12.2.15 Description A flaw in the G-Invoicing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-92950

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.10 through 12.2.15 Description A flaw in the G-Invoicing component of Oracle Purchasing allows a low privileged attacker with network access via HTTP to compromise the system. This issue...

CVE-2026-87167: Improper Access Control

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87168: Improper Access Control

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...