Capacity vulnerabilities

6 known vulnerabilities in Capacity from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Capacity: Improper Access Control

  CVE-2026-101543Oct 20, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 8.8 High severity

  Oracle Capacity: Improper Access Control

  CVE-2026-101542Oct 20, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.7 High severity

  Oracle Capacity: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101541Oct 20, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.7 High severity

  Oracle Capacity: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101540Oct 20, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.6 High severity

  Oracle Capacity: Improper Access Control

  CVE-2026-101387Oct 20, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.7 High severity

  Oracle Capacity: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60923Jul 21, 2026Oracle

  Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c