43114 matches found
EUVD-2026-79815
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS India...
CVE-2026-87159
Oracle HRMS (India) , a component of Oracle E-Business Suite (sub-component: Internal Operations), is affected in supported versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletio...
CVE-2026-87157
A vulnerability in the Product Diagnostic Tools component of Oracle Order Management (Oracle E-Business Suite) affects supported versions 12.2.4 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction, resulting in high c...
EUVD-2026-79811
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...
CVE-2026-87154
CVE-2026-87154 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Product Hub without user interaction. S...
CVE-2026-87155
Oracle Product Hub (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in full takeover with high impact to con...
EUVD-2026-79809
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...
CVE-2026-87156
CVE-2026-87156 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful exploitation resu...
EUVD-2026-79812
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...
EUVD-2026-79810
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...
EUVD-2026-79806
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-87153
CVE-2026-87153 is a vulnerability in the Oracle Product Hub product of Oracle E-Business Suite , specifically in the Internal Operations component. Supported versions 12.2.3 through 12.2.15 are affected. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to c...
CVE-2026-87152
Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...
EUVD-2026-79807
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...
CVE-2026-87151
Oracle E-Business Suite – Bills of Material (component: Setup Workbench ) in versions 12.2.3 through 12.2.15 contains an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability has a scope change , meaning succe...
EUVD-2026-79808
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub...
EUVD-2026-79805
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Setup Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material...
CVE-2026-87150
CVE-2026-87150 is an easily exploitable vulnerability in the Setup Workbench component of Oracle Bills of Material (Oracle E-Business Suite), affecting supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve takeover of t...
EUVD-2026-79804
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award/PO. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2026-87149
This vulnerability affects Oracle Contract Lifecycle Management for Public Sector (component: Award/PO ) in Oracle E-Business Suite, versions 12.2.8 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity to achieve unauthorized access to critic...