CVE-2021-2289

The CVE-2021-2289 entry affects Oracle E-Business Suite, Oracle Product Hub, Template GTIN search. The vulnerable component is the Template GTIN search functionality in Product Hub, affected on versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The root cause is a vulnerability that allows a low-privileg...

CVE-2024-21252

CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-61310

CVE-2026-61310 affects Oracle E-Business Suite’s Oracle Product Hub (component: Internal Operations) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, potentially creating, deleting or modifying data or gaining un...

CVE-2026-87156

CVE-2026-87156 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the component. Successful exploitation resu...

CVE-2026-70918

CVE-2026-70918 affects the Oracle Product Hub component (Outbound Data) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of the Oracle Product Hub ...

CVE-2026-83442

Oracle E-Business Suite contains a vulnerability in the Product Hub product (component: Internal Operations) affecting supported versions 12.2.3 through 12.2.15 . The flaw allows a high-privileged attacker with network access via HTTP to exploit the vulnerability with low complexity, resulting in...

CVE-2026-87154

CVE-2026-87154 affects the Oracle Product Hub component (Internal Operations ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Product Hub without user interaction. S...

CVE-2025-53043

CVE-2025-53043 affects Oracle E-Business Suite’s Oracle Product Hub (component: Item Catalog). Affected versions are 12.2.3–12.2.14. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise Oracle Product Hub, potentially enabling unauthorized creation, ...

CVE-2026-47019

CVE-2026-47019 affects Oracle E-Business Suite — Oracle Product Hub (Item Catalog) in versions 12.2.3 through 12.2.15. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access over HTTP to potentially create, delete, or modify data within Ora...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-83440

A vulnerability in the Oracle Product Hub component of Oracle E-Business Suite (sub-component: Internal Operations) affects supported versions 12.2.3 through 12.2.15 . An attacker with high privileges and network access via HTTP can exploit it with low complexity and no user interaction , resulti...

CVE-2026-87155

Oracle Product Hub (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, resulting in full takeover with high impact to con...

CVE-2026-83441

Oracle E-Business Suite – Product Hub (component: Internal Operations) in supported versions 12.2.3 through 12.2.15 contains a vulnerability allowing a low-privileged attacker with network access via HTTP to compromise the component. The vulnerability is rated difficult to exploit (high attack co...

CVE-2026-87153

CVE-2026-87153 is a vulnerability in the Oracle Product Hub product of Oracle E-Business Suite , specifically in the Internal Operations component. Supported versions 12.2.3 through 12.2.15 are affected. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to c...

CVE-2026-83444

Oracle Product Hub (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a network-accessible vulnerability exploitable via HTTP with low privileges and no user interaction. Successful exploitation results in takeover of Oracle Product Hub, wi...

CVE-2026-83485

This vulnerability affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite, supporting versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it with low complexity and no user interaction. Successful exploitation resul...

CVE-2026-83486

CVE-2026-83486 affects the Item Catalog component of Oracle Product Hub within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data or complete access to all O...

CVE-2026-83487

Oracle Product Hub (component: Item Catalog ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Product Hub acce...

CVE-2026-61312

Affected product: Oracle E-Business Suite, Oracle Product Hub (Internal Operations) with versions 12.2.3–12.2.15. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Product Hub, potentially affecting additional products and enabling takeover of the hu...

CVE-2026-61275

The CVE-2026-61275 affects Oracle E-Business Suite’s Oracle Product Hub (component: Role Based Security) in versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, gaining unauthorized update/insert/delete access, read access to a da...