CVE-2026-83425

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2026-92894

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.12 through 12.2.15 Description A flaw in the Internal Operations component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lea...

The vulnerability of the Internal Operations component of the application’s technical maintenance, repair, and major system overhauls in Oracle Complex Maintenance, Repair, and Overhaul allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...

CVE-2026-61306

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite component: Production. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

PT-2026-77520

Name of the Vulnerable Software and Affected Versions Oracle Complex Maintenance, Repair and Overhaul versions 12.2.3 through 12.2.15 Description An issue exists in the Production component of the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite. A low privileged...

CVE-2017-10180

CVE-2017-10180 affects Oracle E-Business Suite CMRO (Oracle CRM Technical Foundation) with affected versions 12.1.3, 12.2.3–12.2.6. The vulnerability is a cross-site scripting (XSS) flaw due to improper validation of user input in CMRO, allowing an unauthenticated, network-accessible attacker to ...

CVE-2017-10180: Undefined Security Weakness

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: CMRO. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...