Sales Offline vulnerabilities

7 known vulnerabilities in Sales Offline from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-83128Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT

• 7.7 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-83127Sep 15, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.0 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-60790Jul 21, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via H

• 8.8 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-60789Jul 21, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.3 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-60788Jul 21, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 8.1 High severity

  Oracle Sales Offline: Improper Access Control

  CVE-2026-60735Jul 21, 2026Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.5 High severity

  Sales Offline: Improper Access Control

  CVE-2023-21854Jan 18, 2023Oracle

  Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to