iSetup vulnerabilities

3 known vulnerabilities in iSetup from Oracle. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle iSetup: Improper Access Control

  CVE-2026-70713Aug 18, 2026Oracle

  Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network

• 8.8 High severity

  Oracle iSetup: Improper Privilege Management

  CVE-2026-46937Jun 17, 2026Oracle

  Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network a

• 7.5 High severity

  iSetup: Missing Authentication for Critical Functionality

  CVE-2023-21856Jan 18, 2023Oracle

  Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network