CVE-2021-2289

The CVE-2021-2289 entry affects Oracle E-Business Suite, Oracle Product Hub, Template GTIN search. The vulnerable component is the Template GTIN search functionality in Product Hub, affected on versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The root cause is a vulnerability that allows a low-privileg...

CVE-2024-21252

CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...

CVE-2026-47019

CVE-2026-47019 affects Oracle E-Business Suite — Oracle Product Hub (Item Catalog) in versions 12.2.3 through 12.2.15. The vulnerability allows a low-privilege, unauthenticated or lightly authenticated attacker with network access over HTTP to potentially create, delete, or modify data within Ora...

CVE-2026-61310

CVE-2026-61310 affects Oracle E-Business Suite’s Oracle Product Hub (component: Internal Operations) with affected versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, potentially creating, deleting or modifying data or gaining un...

CVE-2025-53043

CVE-2025-53043 affects Oracle E-Business Suite’s Oracle Product Hub (component: Item Catalog). Affected versions are 12.2.3–12.2.14. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise Oracle Product Hub, potentially enabling unauthorized creation, ...

CVE-2026-61274

CVE-2026-61274 affects Oracle E-Business Suite’s Oracle Product Hub, specifically the Item Catalog component, with affected versions 12.2.3–12.2.15. The vuln is exploitable by a low-privilege attacker over HTTP with network access, leading to unauthorized read, and potential unauthorized update/i...

CVE-2026-61311

The CVE-2026-61311 entry affects Oracle E-Business Suite’s Oracle Product Hub (Internal Operations) with affected versions 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTP to take over Oracle Product Hub, per the NVD entry and Oracle security alert....

CVE-2026-70918

CVE-2026-70918 affects the Oracle Product Hub component (Outbound Data) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of the Oracle Product Hub ...

CVE-2026-61275

The CVE-2026-61275 affects Oracle E-Business Suite’s Oracle Product Hub (component: Role Based Security) in versions 12.2.3–12.2.15. An attacker with network access via HTTP and low privileges can compromise Oracle Product Hub, gaining unauthorized update/insert/delete access, read access to a da...

CVE-2026-61312

Affected product: Oracle E-Business Suite, Oracle Product Hub (Internal Operations) with versions 12.2.3–12.2.15. Vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Product Hub, potentially affecting additional products and enabling takeover of the hu...