Order Management vulnerabilities

6 known vulnerabilities in Order Management from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-70932Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the

• 7.5 High severity

  Oracle Order Management: Missing Authentication for Critical Functionality

  CVE-2026-70930Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 7.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-70760Aug 18, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acces

• 8.1 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-62445Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.2 High severity

  Oracle Order Management: Improper Access Control

  CVE-2026-61115Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access

• 8.8 High severity

  Oracle Order Management: Improper Privilege Management

  CVE-2026-60872Jul 21, 2026Oracle

  Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access