Oracle Sales Online vulnerabilities

4 known vulnerabilities in Oracle Sales Online from Oracle. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Oracle Sales Online: Improper Access Control

  CVE-2026-101643Oct 20, 2026Oracle

  Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.5 High severity

  Oracle Sales Online: Improper Access Control

  CVE-2026-83172Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: OSO Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comprom

• 7.6 High severity

  Oracle Sales Online: Cross-Site Request Forgery

  CVE-2026-83126Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.8 High severity

  Oracle Sales Online: Improper Access Control

  CVE-2026-83124Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP