CVE-2018-2954

CVE-2018-2954 affects Oracle E-Business Suite Order Management, specifically the Product Diagnostic Tools subcomponent. The vulnerability impacts multiple supported 12.1.x and 12.2.x versions; it is exploitable by a low-privileged user with login to the hosting infrastructure and can lead to take...

CVE-2026-60872

CVE-2026-60872 affects Oracle E-Business Suite — Oracle Order Management, specifically the Product Diagnostic Tools component, with affected versions 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Order Management, pote...

CVE-2026-61112

The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-62445

CVE-2026-62445 affects Oracle E-Business Suite’s Oracle Order Management (component: Product Diagnostic Tools). Affected versions are 12.2.4–12.2.15. The vulnerability is exploitable over the network with a low-privilege account via HTTP and can lead to unauthorized creation, deletion, or modific...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...