Oracle iSupplier Portal vulnerabilities

4 known vulnerabilities in Oracle iSupplier Portal from Oracle. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Oracle iSupplier Portal: Improper Access Control

  CVE-2026-70779Aug 18, 2026Oracle

  Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi

• 7.5 High severity

  Oracle iSupplier Portal: Improper Access Control

  CVE-2026-70777Aug 18, 2026Oracle

  Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 7.5 High severity

  Oracle iSupplier Portal: Improper Access Control

  CVE-2026-46957Jun 17, 2026Oracle

  Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via

• 8.0 High severity

  Oracle iSupplier Portal: Cross-Site Request Forgery

  CVE-2026-46894Jun 17, 2026Oracle

  Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home Page). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to co