Oracle Order Management vulnerabilities

9 known vulnerabilities in Oracle Order Management from Oracle. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-87158Sep 15, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-87157Sep 15, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.7 High severity

  Oracle Order Management: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-83116Sep 15, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.2 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-70932Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the

• 7.5 High severity

  Oracle Order Management: Missing Authentication for Critical Functionality

  CVE-2026-70930Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 7.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-70760Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-62445Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.2 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-61115Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 8.8 High severity

  Oracle Order Management: Improper Privilege Management

  CVE-2026-60872Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access