CVE-2021-2262

CVE-2021-2262 affects Oracle E-Business Suite Purchasing (Endeca) 12.1.3. The Endeca component is vulnerable, and a low-privileged attacker with network access via HTTPS can compromise Oracle Purchasing, potentially causing unauthorized creation, deletion, or modification of data or full data acc...

CVE-2024-21132

CVE-2024-21132 affects Oracle E-Business Suite Oracle Purchasing (component: Approvals) and is listed for affected 12.2.3–12.2.13. The vulnerability permits a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Purchasing, with human interaction required, and could lead to una...

CVE-2026-70811

CVE-2026-70811 affects the Oracle Purchasing product (component: Internal Operations ) of Oracle E-Business Suite , versions 12.2.5 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to perform unauthorized creation, de...

CVE-2026-70947

Oracle Purchasing in E-Business Suite versions 12.2.3 through 12.2.15 is affected by an unauthenticated, network-accessible vulnerability (CVSS 7.5 HIGH) that can expose critical data. Oracle's August 2026 CPU advisory is the source for patch details; no exploit code is provided in the documents.

CVE-2026-62491

A HIGH-severity vulnerability (CVSS 8.1) in Oracle E-Business Suite Purchasing (component: Internal Operations) affects versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can compromise confidentiality and integrity of Purchasing data. Exploitation details are not provided. Or...

CVE-2026-70798

CVE-2026-70798 affects Oracle E-Business Suite Purchasing (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged local attacker can easily exploit it to take over Oracle Purchasing, with full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit detai...

CVE-2026-70948

Oracle E-Business Suite Purchasing (versions 12.2.3–12.2.15) has a HIGH-severity flaw allowing a low-privileged attacker with network access to fully compromise the application; apply Oracle's August 2026 CPU patches immediately. No exploitation details are provided in the documents.

CVE-2026-70797

Oracle E-Business Suite's Purchasing component (Internal Operations) in versions 12.2.3 through 12.2.15 is affected by a HIGH-severity (CVSS 7.2) vulnerability exploitable over HTTP by a high-privileged attacker, enabling full confidentiality, integrity, and availability impact. Oracle's August 2...