Product Hub vulnerabilities

22 known vulnerabilities in Product Hub from Oracle. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

22vulnerabilities

0critical

22high

0exploited

8.1average CVSS score

Latest first

8.8 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-101854Oct 20, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.8 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-101853Oct 20, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.8 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-101852Oct 20, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
7.7 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-101818Oct 20, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to com
7.2 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-101816Oct 20, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP
7.1 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-87156Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.8 High severity
Oracle Product Hub: Improper Privilege Management
CVE-2026-87155Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.1 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-87154Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.1 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-87153Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
7.7 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-83487Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr
7.7 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-83486Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr
7.7 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-83485Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr
8.8 High severity
Oracle Product Hub: Improper Privilege Management
CVE-2026-83444Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
7.2 High severity
Oracle Product Hub: Improper Privilege Management
CVE-2026-83442Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP
7.2 High severity
Oracle Product Hub: Improper Privilege Management
CVE-2026-83440Sep 15, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP
8.8 High severity
Oracle Product Hub: Missing Authentication for Critical Functionality
CVE-2026-70918Aug 18, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Outbound Data). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp
8.5 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-61312Jul 21, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP
8.8 High severity
Oracle Product Hub: Improper Privilege Management
CVE-2026-61311Jul 21, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.1 High severity
Oracle Product Hub: Improper Access Control
CVE-2026-61310Jul 21, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t
8.1 High severity
Oracle Product Hub: Missing Authentication for Critical Functionality
CVE-2026-47019Jul 21, 2026Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr
8.1 High severity
Oracle Product Hub: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2025-53043Oct 21, 2025Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr
8.1 High severity
Oracle Product Hub: Missing Authorization
CVE-2024-21252Oct 15, 2024Oracle
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr