iProcurement vulnerabilities

4 known vulnerabilities in iProcurement from Oracle. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  iProcurement: Improper Access Control

  CVE-2026-91337Oct 20, 2026Oracle

  Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to

• 7.5 High severity

  iProcurement: Improper Access Control

  CVE-2026-91321Oct 20, 2026Oracle

  Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.2 High severity

  iProcurement: Improper Access Control

  CVE-2026-91316Oct 20, 2026Oracle

  Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS

• 7.2 High severity

  iProcurement: Improper Privilege Management

  CVE-2026-91260Oct 20, 2026Oracle

  Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP