Application Object Library vulnerabilities

8 known vulnerabilities in Application Object Library from Oracle. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101566Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the inf

• 7.5 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101552Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 7.5 High severity

  Oracle Application Object Library: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61116Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.5 High severity

  Oracle Application Object Library: Improper Privilege Management

  CVE-2026-61114Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access

• 7.4 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-61113Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 9.6 Critical severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-60773Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS

• 7.5 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-60770Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP

• 7.5 High severity

  Oracle Application Object Library: Uncontrolled Resource Consumption

  CVE-2025-30730Apr 15, 2025Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP