CVE-2026-101853

A vulnerability exists in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations ) in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Product Hub, potential...

CVE-2026-101852

A vulnerability exists in the Internal Operations component of the Oracle Product Hub product within Oracle E-Business Suite . The affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle Product H...

CVE-2026-101849

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (specifically the Create Item Instance component) in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided there is human i...

CVE-2026-101851

A vulnerability exists in the Installed Base product of Oracle E-Business Suite , specifically within the Data Provider UI component. Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful ex...

CVE-2026-101850

A vulnerability exists in the Installed Base product of Oracle E-Business Suite (component: HTML UI ) affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Installed Base, although successful attacks req...

CVE-2026-101846

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing, provided they can tri...

CVE-2026-101847

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . This is a difficult-to-exploit vulnerability that allows a low privileged attacker with network access via HTTP to compro...

CVE-2026-101844

A vulnerability exists in the Oracle Concurrent Processing product within Oracle E-Business Suite , specifically affecting the Concurrent Requests component in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerab...

CVE-2026-101845

A vulnerability exists in the Internal Operations component of the Oracle Purchasing product within Oracle E-Business Suite (versions 12.2.3-12.2.15). This difficult to exploit vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful ...

CVE-2026-101841

A vulnerability exists in the Global Order Promising product of Oracle E-Business Suite , specifically within the Web Service component. Affected supported versions include 12.2.3 through 12.2.15 . This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HT...

CVE-2026-101840

A vulnerability exists in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite within the Award/PO component. Affected supported versions range from 12.2.3 to 12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this vulnera...

CVE-2026-101842

A vulnerability exists in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, potentially leading to a takeover , provided th...

CVE-2026-101836

A vulnerability exists in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations ) affecting versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the portal. Successful exploitation may lead to...

CVE-2026-101835

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploitation may ...

CVE-2026-101837

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potenti...

CVE-2026-101833

A vulnerability exists in the Internal Operations component of the Oracle Shipping Execution product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploi...

CVE-2026-101834

A vulnerability exists in the Oracle Shipping Execution product of Oracle E-Business Suite within the Workflow Events component. Affected supported versions include 12.2.3-12.2.15 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromi...

CVE-2026-101832

A vulnerability exists in the Product Diagnostic Tools component of the Oracle Order Management product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful expl...

CVE-2026-101831

A vulnerability exists in the Internal Operations component of the Oracle Quality product within Oracle E-Business Suite versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise Oracle Quality, potentially gaining unauthorized access to ...

CVE-2026-101829

The Oracle Mobile Application Server product of Oracle E-Business Suite (specifically the MWA Terminal Server component) is affected by a vulnerability in versions 12.2.3-12.2.15 . This issue allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful expl...