Oracle Supply Chain 12.2.3-12.2.15
productDEcpe:/a:oracle:supply_chain:12.2.3-12.2.15
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
1critical0high0medium0low
updated 2026-10-28
01
vulnerabilities (35)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-61183US | —OT elevated | — |
| CVE-2026-61178US | —OT elevated | — |
| CVE-2026-61167US | —OT elevated | — |
| CVE-2026-62516US | — | — |
| CVE-2026-61175US | —OT elevated | — |
| CVE-2026-61176US | —OT elevated | — |
| CVE-2026-61180US | —OT elevated | — |
| CVE-2026-61179US | —OT elevated | — |
| CVE-2026-61168US | —OT elevated | — |
| CVE-2026-61166US | — | — |
| CVE-2026-61041US | — | — |
| CVE-2026-60583US | —OT elevated | — |
| CVE-2026-61184US | — | — |
| CVE-2026-61171US | —OT elevated | — |
| CVE-2026-61195US | — | — |
| CVE-2026-61194US | — | — |
| CVE-2026-61186US | —OT elevated | — |
| CVE-2026-61172US | — | — |
| CVE-2026-60433US | — | — |
| CVE-2026-47009US | — | — |
| CVE-2026-61170US | —OT elevated | — |
| CVE-2026-61185US | — | — |
| CVE-2026-61173US | — | — |
| CVE-2026-61192US | — | — |
| CVE-2026-61188US | —OT elevated | — |
| CVE-2026-60584US | — | — |
| CVE-2026-60434US | — | — |
| CVE-2026-61181US | — | — |
| CVE-2026-61190US | — | — |
| CVE-2026-61174US | critical9.0 | — |
| CVE-2026-61182US | — | — |
| CVE-2026-61189US | — | — |
| CVE-2026-61169US | — | — |
| CVE-2026-61187US | — | — |
| CVE-2026-61191US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control22 CVEs
- CWE-306Missing Authentication for Critical Function13 CVEs
- CWE-287Improper Authentication8 CVEs
- CWE-269Improper Privilege Management7 CVEs
- CWE-400Uncontrolled Resource Consumption4 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
- CWE-404Improper Resource Shutdown or Release1 CVEs
- CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)35 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan