E-business Suite vulnerabilities

106 known vulnerabilities in E-business Suite from Oracle. 106 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Cost Management: Improper Access Control

  CVE-2026-101567Oct 20, 2026Oracle

  Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Materials Requirement Planning: Improper Access Control

  CVE-2026-101546Oct 20, 2026Oracle

  Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with netw

• 7.5 High severity

  Oracle Sales Foundation: Improper Access Control

  CVE-2026-101535Oct 20, 2026Oracle

  Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t

• 8.5 High severity

  Oracle EDI Gateway: Improper Access Control

  CVE-2026-101534Oct 20, 2026Oracle

  Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Ora

• 7.2 High severity

  Oracle Contracts: Improper Privilege Management

  CVE-2026-83482Sep 15, 2026Oracle

  Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t

• 7.2 High severity

  Oracle Contracts: Improper Privilege Management

  CVE-2026-83481Sep 15, 2026Oracle

  Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t

• 8.8 High severity

  Oracle Contracts: Improper Privilege Management

  CVE-2026-83479Sep 15, 2026Oracle

  Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 8.1 High severity

  Oracle Demand Signal Repository: Uncontrolled Resource Consumption

  CVE-2026-83457Sep 15, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.8 High severity

  Oracle Demand Signal Repository: Improper Privilege Management

  CVE-2026-83456Sep 15, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.1 High severity

  Oracle Demand Signal Repository: Improper Access Control

  CVE-2026-83455Sep 15, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.1 High severity

  Oracle Financials Common Modules: Improper Access Control

  CVE-2026-83446Sep 15, 2026Oracle

  Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.2 High severity

  Oracle Engineering: Improper Access Control

  CVE-2026-83438Sep 15, 2026Oracle

  Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP

• 7.7 High severity

  Oracle Engineering: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83437Sep 15, 2026Oracle

  Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 8.1 High severity

  Oracle Depot Repair: Improper Access Control

  CVE-2026-83432Sep 15, 2026Oracle

  Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access v

• 8.1 High severity

  Oracle Demand Signal Repository: Improper Access Control

  CVE-2026-83429Sep 15, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.1 High severity

  Oracle Demand Signal Repository: Improper Access Control

  CVE-2026-83428Sep 15, 2026Oracle

  Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.7 High severity

  Oracle Sales: Improper Access Control

  CVE-2026-83129Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

• 7.1 High severity

  Oracle Financials for Asia/Pacific: Improper Access Control

  CVE-2026-70837Aug 18, 2026Oracle

  Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network a

• 8.1 High severity

  Oracle Call Center Technology: Improper Access Control

  CVE-2026-70814Aug 18, 2026Oracle

  Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Oracle Call Center Technology: Improper Access Control

  CVE-2026-70813Aug 18, 2026Oracle

  Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle Call Center Technology: Improper Access Control

  CVE-2026-70812Aug 18, 2026Oracle

  Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle Call Center Technology: Improper Access Control

  CVE-2026-70807Aug 18, 2026Oracle

  Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.2 High severity

  Oracle Cost Management: Improper Access Control

  CVE-2026-62540Aug 18, 2026Oracle

  Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

• 7.7 High severity

  Oracle Financials Common Modules: Improper Access Control

  CVE-2026-61331Aug 18, 2026Oracle

  Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  Oracle U.S. Federal Financials: Improper Access Control

  CVE-2026-61319Aug 18, 2026Oracle

  Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.4 High severity

  Oracle Internet Procurement Connector: Improper Access Control

  CVE-2026-60759Aug 18, 2026Oracle

  Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 7.6 High severity

  Oracle Production Scheduling: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62518Jul 21, 2026Oracle

  Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.6 High severity

  Oracle Advanced Planning Command Center: Improper Privilege Management

  CVE-2026-62515Jul 21, 2026Oracle

  Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with net

• 8.1 High severity

  Oracle Process Manufacturing Regulatory…: Improper Access Control

  CVE-2026-62514Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

• 8.5 High severity

  Oracle Process Manufacturing Regulatory…: Improper Access Control

  CVE-2026-62513Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacke

• 7.5 High severity

  Oracle Process Manufacturing Process Execution: Improper Access Control

  CVE-2026-62495Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Process Execution product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Difficult to exploit vulnerability allows low privileged attacker with n

• 7.5 High severity

  Oracle Purchasing: Improper Privilege Management

  CVE-2026-62493Jul 21, 2026Oracle

  Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle Contracts Integration: Cross-Site Request Forgery

  CVE-2026-62443Jul 21, 2026Oracle

  Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access

• 8.1 High severity

  Oracle Contracts Integration: Improper Access Control

  CVE-2026-61338Jul 21, 2026Oracle

  Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle Payables: Improper Privilege Management

  CVE-2026-61320Jul 21, 2026Oracle

  Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.2 High severity

  Oracle EDI Gateway: Improper Access Control

  CVE-2026-61314Jul 21, 2026Oracle

  Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 7.1 High severity

  Oracle Process Manufacturing Logistics: Improper Access Control

  CVE-2026-61299Jul 21, 2026Oracle

  Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo

• 7.7 High severity

  Oracle Configure to Order: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61125Jul 21, 2026Oracle

  Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.2 High severity

  Oracle MES for Process Manufacturing: Improper Access Control

  CVE-2026-61101Jul 21, 2026Oracle

  Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with networ

• 7.8 High severity

  Oracle Project Foundation: Improper Privilege Management

  CVE-2026-61090Jul 21, 2026Oracle

  Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastruct