CVE-2026-83171

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83173

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83177

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83169

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Java Server Issues. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83170

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

CVE-2026-83177

This vulnerability affects the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction , resulting in unauthorized creation, ...

CVE-2026-83173

CVE-2026-83173 affects the Documents component of Oracle One-to-One Fulfillment within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful exploita...

EUVD-2026-79500

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

CVE-2026-83171

A vulnerability in the Documents component of Oracle One-to-One Fulfillment (Oracle E-Business Suite) affects supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (high complexity). Due...

EUVD-2026-79498

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One...

EUVD-2026-79497

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Documents. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the...

CVE-2026-83169

CVE-2026-83169 affects Oracle One-to-One Fulfillment (component: Java Server Issues ) within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in a takeover (high impact...

MAL-2026-16176 Malicious code in fulfillment-cuprum-auth-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06df6767178d76043d26df04fcbe4e8de2f579d38e96f52a04346c04a6dda565 The package's preinstall script index.js runs automatically on npm install and collects host identifiers via os.hostname, os.userInfo, os.homedir, an...

CVE-2026-81424

The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at least the referenced product's price, allowing...

CVE-2026-70786

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-61737

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-77781

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-71051

The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated request can flip an order from unpaid to settled purely from an order number and a status flag, with no signature, amount, or...

EUVD-2026-47205

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47204

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite component: Fulfillment Engine. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...