Applications Framework vulnerabilities

7 known vulnerabilities in Applications Framework from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oracle Applications Framework: Improper Authentication

  CVE-2026-83327Sep 15, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.1 Critical severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-62546Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via

• 8.8 High severity

  Oracle Applications Framework: Improper Privilege Management

  CVE-2026-62534Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60774Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 8.1 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60768Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access vi

• 8.8 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60676Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT

• 8.8 High severity

  Oracle Applications Framework: Improper Access Control

  CVE-2026-60675Jul 21, 2026Oracle

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTT