Oracle Configure to Order vulnerabilities

2 known vulnerabilities in Oracle Configure to Order from Oracle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Oracle Configure to Order: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-61125Jul 21, 2026Oracle

  Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.1 High severity

  Oracle Configure to Order: Improper Access Control

  CVE-2026-46939Jun 17, 2026Oracle

  Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network acce