Oracle Application Object Library vulnerabilities

16 known vulnerabilities in Oracle Application Object Library from Oracle. 16 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oracle Application Object Library: Improper Authentication

  CVE-2026-101767Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.8 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101757Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the inf

• 8.1 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101700Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 7.8 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101566Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the inf

• 7.5 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-101552Oct 20, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 7.4 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-83184Sep 15, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 8.0 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-83178Sep 15, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTT

• 7.5 High severity

  Oracle Application Object Library: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83167Sep 15, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 8.8 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-83163Sep 15, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netw

• 7.4 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-83162Sep 15, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 7.5 High severity

  Oracle Application Object Library: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61116Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 7.5 High severity

  Oracle Application Object Library: Improper Privilege Management

  CVE-2026-61114Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access

• 7.4 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-61113Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 9.6 Critical severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-60773Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS

• 7.5 High severity

  Oracle Application Object Library: Improper Access Control

  CVE-2026-60770Jul 21, 2026Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP

• 7.5 High severity

  Oracle Application Object Library: Uncontrolled Resource Consumption

  CVE-2025-30730Apr 15, 2025Oracle

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP