Service Contracts vulnerabilities

2 known vulnerabilities in Service Contracts from Oracle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Oracle Service Contracts: Improper Access Control

  CVE-2026-70783Aug 18, 2026Oracle

  Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access v

• 8.1 High severity

  Oracle Service Contracts: Incorrect Authorization

  CVE-2024-21280Oct 15, 2024Oracle

  Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.2.5-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co