CVE-2016-3527

CVE-2016-3527 affects Oracle Supply Chain Products Suite (Delivery: Oracle Demand Planning) 12.1 and 12.2, via the ODPDA Servlet in the Demand Planning component. The vulnerability is described as unspecified in the ODPDA Servlet, enabling remote attackers to impact confidentiality and integrity....

CVE-2026-70846

Oracle Demand Planning (versions 12.1 and 12.2, Supply Chain "Internal Operations" component) has a critical (CVSS 9.6) flaw: a low-privilege attacker with network HTTP access can gain unauthorized read/write access to all accessible data, with scope change potentially impacting additional produc...

CVE-2026-70852

Oracle Demand Planning versions 12.1 and 12.2 (component: Internal Operations) are affected by an easily exploitable, unauthenticated HTTP-based vulnerability (CVSS 8.2, HIGH) allowing full data access and partial write access. Oracle's August 2026 Critical Patch Update addresses this issue. No e...