Oracle Bills of Material vulnerabilities

14 known vulnerabilities in Oracle Bills of Material from Oracle. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Bills of Material: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101847Oct 20, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 7.5 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-101823Oct 20, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 7.2 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-101822Oct 20, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access v

• 7.7 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-87151Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.8 High severity

  Oracle Bills of Material: Improper Privilege Management

  CVE-2026-87150Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.0 High severity

  Oracle Bills of Material: Improper Privilege Management

  CVE-2026-83450Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via H

• 8.5 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-83449Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.1 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-83448Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.1 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-83447Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.2 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-83435Sep 15, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access v

• 8.5 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-70718Aug 18, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 8.1 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-61327Jul 21, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.0 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-60807Jul 21, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle Bills of Material: Improper Access Control

  CVE-2026-47031Jul 21, 2026Oracle

  Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to