EUVD-2026-106245

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

EUVD-2026-106221

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

EUVD-2026-106222

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-101847

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-101822

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-101823

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

CVE-2026-101847

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . This is a difficult-to-exploit vulnerability that allows a low privileged attacker with network access via HTTP to compro...

CVE-2026-101823

The Oracle Bills of Material product, specifically the Internal Operations component within Oracle E-Business Suite (versions 12.2.3-12.2.15 ), is susceptible to a high-complexity vulnerability. A low privileged attacker with network access via HTTP can exploit this flaw to compromise the product...

CVE-2026-101822

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product. Successful ex...

PT-2026-119516

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

Oracle E-Business Suite: CVE-2026-101847: Critical Patch Update

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

PT-2026-119494

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

Oracle E-Business Suite: CVE-2026-101822: Critical Patch Update

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

PT-2026-119493

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Bills of...

Oracle E-Business Suite: CVE-2026-101823: Critical Patch Update

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Bills of Material through HTTP network access...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with high privileges to access via the HTTP network, unauthorizedly create, delete, or modify critical da...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Bills of Material through HTTP network access...

CVE-2026-109183

jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POST /depotHead/addDepotHeadAndDetail requests. Attackers can supply a status of 1 to skip audit permission checks and multi-level approval workflows...

CVE-2026-109181

jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or department data to list other users' bills by adding a purchaseStatus value. Attackers can include purchaseStatus=0 in the search JSON on GET /depotHead/list, causing...