CVE-2018-2954

CVE-2018-2954 affects Oracle E-Business Suite Order Management, specifically the Product Diagnostic Tools subcomponent. The vulnerability impacts multiple supported 12.1.x and 12.2.x versions; it is exploitable by a low-privileged user with login to the hosting infrastructure and can lead to take...

CVE-2026-60872

CVE-2026-60872 affects Oracle E-Business Suite — Oracle Order Management, specifically the Product Diagnostic Tools component, with affected versions 12.2.3 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Order Management, pote...

CVE-2026-61112

The CVE-2026-61112 affects Oracle E-Business Suite’s Order Management product (component: Product Diagnostic Tools). Affected versions are 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access over HTTP to gain unauthorized access to Oracle Order Mana...

CVE-2026-60864

CVE-2026-60864 affects Oracle E-Business Suite Order Management (component: Product Diagnostic Tools) in versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Order Management, with potential unauthorized update/insert/dele...

CVE-2026-61115

The CVE-2026-61115 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Order Management, specifically the Product Diagnostic Tools component. Affected versions are 12.2.3 through 12.2.15. The flaw is exploitable over a network via HTTP by a high-privilege attacker and can lead to ...

CVE-2026-60862

Summary: CVE-2026-60862 affects Oracle E-Business Suite, specifically the Oracle Order Management component (Product Diagnostic Tools). Affected versions are 12.2.3 through 12.2.15. The vulnerability allows a high-privilege attacker who can reach the system over HTTP to compromise Oracle Order Ma...

CVE-2026-62445

CVE-2026-62445 affects Oracle E-Business Suite’s Oracle Order Management (component: Product Diagnostic Tools). Affected versions are 12.2.4–12.2.15. The vulnerability is exploitable over the network with a low-privilege account via HTTP and can lead to unauthorized creation, deletion, or modific...

CVE-2026-70932

Oracle E-Business Suite Order Management Product Diagnostic Tools (versions 12.2.3-12.2.15) has a HIGH severity local vulnerability (CVSS 7.2) allowing high-privilege attackers to gain unauthorized read/write access to critical data with scope change; exploitation details are not provided in the ...

CVE-2026-70760

Oracle EBS Order Management, component Product Diagnostic Tools, versions 12.2.3–12.2.15, is vulnerable to a network-based HTTP exploit by low-privileged attackers, causing unauthorized data access and modification with scope change (CVSS 7.1 HIGH). No in-the-wild exploitation reported. Patch via...

CVE-2026-70930

A HIGH-severity vulnerability affects the Product Diagnostic Tools component of Oracle E-Business Suite Order Management, versions 12.2.3 through 12.2.15. A low-privileged attacker with network HTTP access can exploit it (high attack complexity) to achieve full compromise of Oracle Order Manageme...