CVE-2021-2262

CVE-2021-2262 affects Oracle E-Business Suite Purchasing (Endeca) 12.1.3. The Endeca component is vulnerable, and a low-privileged attacker with network access via HTTPS can compromise Oracle Purchasing, potentially causing unauthorized creation, deletion, or modification of data or full data acc...

CVE-2024-21132

CVE-2024-21132 affects Oracle E-Business Suite Oracle Purchasing (component: Approvals) and is listed for affected 12.2.3–12.2.13. The vulnerability permits a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Purchasing, with human interaction required, and could lead to una...

CVE-2026-70811

CVE-2026-70811 affects the Oracle Purchasing product (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.5 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to perform unauthorized creation, de...

CVE-2026-70947

Oracle Purchasing in E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) that can expose critical data. Oracle's August 2026 CPU advisory is the source for patch details; no exploit code is provided in the documents.

CVE-2026-87166

Oracle Purchasing in Oracle E-Business Suite (component: "Other issue") is affected by a vulnerability in supported versions 12.2.3 through 12.2.15 . The flaw allows a low-privileged attacker with network access via HTTP and no user interaction to compromise the product. Successful exploitation c...

CVE-2026-62491

A HIGH-severity vulnerability (CVSS 8.1) in Oracle E-Business Suite Purchasing (component: Internal Operations) affects versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can compromise confidentiality and integrity of Purchasing data. Exploitation details are not provided. Or...

CVE-2026-87163

Oracle E-Business Suite 's Oracle Purchasing module is affected by a vulnerability (component listed as "Other issue") in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this with low complexity and no user interaction to achieve a fu...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

CVE-2026-70798

CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...

CVE-2026-70948

Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

CVE-2026-70797

Oracle E-Business Suite's Purchasing component (Internal Operations) in versions 12.2.3 through 12.2.15 is affected by a HIGH-severity (CVSS 7.2) vulnerability exploitable over HTTP by a high-privileged attacker, enabling full confidentiality, integrity, and availability impact. Oracle's August 2...

CVE-2026-87265

CVE-2026-87265 affects the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue ), versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Purchasing, resulting in unauthorized creation, d...