Oracle One-to-One Fulfillment vulnerabilities

7 known vulnerabilities in Oracle One-to-One Fulfillment from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle One-to-One Fulfillment: Improper Access Control

  CVE-2026-101699Oct 20, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT

• 7.5 High severity

  Oracle One-to-One Fulfillment: Improper Access Control

  CVE-2026-101698Oct 20, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle One-to-One Fulfillment: Improper Access Control

  CVE-2026-83177Sep 15, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle One-to-One Fulfillment: Improper Access Control

  CVE-2026-83173Sep 15, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle One-to-One Fulfillment: Improper Access Control

  CVE-2026-83171Sep 15, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT

• 8.0 High severity

  Oracle One-to-One Fulfillment: Improper Privilege Management

  CVE-2026-83170Sep 15, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with access to the physical c

• 8.1 High severity

  Oracle One-to-One Fulfillment: Improper Privilege Management

  CVE-2026-83169Sep 15, 2026Oracle

  Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network acce