CVE-2026-87162

Oracle Contract Lifecycle Management for Public Sector (part of Oracle E-Business Suite, component Award/PO ) in versions 12.2.13 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in a f...

CVE-2026-87149

This vulnerability affects Oracle Contract Lifecycle Management for Public Sector (component: Award/PO ) in Oracle E-Business Suite, versions 12.2.8 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity to achieve unauthorized access to critic...