Installed Base vulnerabilities

8 known vulnerabilities in Installed Base from Oracle. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Installed Base: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101851Oct 20, 2026Oracle

  Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr

• 7.6 High severity

  Installed Base: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101849Oct 20, 2026Oracle

  Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 8.1 High severity

  Oracle Installed Base: Improper Access Control

  CVE-2026-87152Sep 15, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.3 High severity

  Oracle Installed Base: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62473Jul 21, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.1 High severity

  Oracle Installed Base: Improper Access Control

  CVE-2026-62472Jul 21, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 7.1 High severity

  Oracle Installed Base: Improper Access Control

  CVE-2026-60908Jul 21, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.1 High severity

  Oracle Installed Base: Improper Access Control

  CVE-2026-60904Jul 21, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT

• 8.8 High severity

  Oracle Installed Base: Improper Access Control

  CVE-2026-60738Jul 21, 2026Oracle

  Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HT