Oracle E-Business Suite 12.2.4-12.2.15
productDEcpe:/a:oracle:e-business_suite:12.2.4-12.2.15
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
by severity
3critical144high12medium0low
updated 2026-10-30
01
vulnerabilities (159)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2026-83462US | critical9.8OT elevated | — | ||||
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15.… | ||||||
| CVE-2026-83452US | critical9.8OT elevated | — | ||||
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.… | ||||||
| CVE-2026-83482US | high7.2 | — | ||||
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit… | ||||||
| CVE-2026-83481US | high7.2 | — | ||||
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit… | ||||||
| CVE-2026-83453US | high7.2 | — | ||||
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.… | ||||||
| CVE-2026-83442US | high7.2 | — | ||||
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-83440US | high7.2 | — | ||||
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-83327US | critical9.8OT elevated | — | ||||
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83328US | high7.2 | — | ||||
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83188US | high7.2 | — | ||||
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo… | ||||||
| CVE-2026-83176US | high7.2 | — | ||||
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2… | ||||||
| CVE-2026-83117US | high7.2 | — | ||||
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul… | ||||||
| CVE-2026-83112US | high7.2 | — | ||||
Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.7-12.2.… | ||||||
| CVE-2026-83082US | high7.2 | — | ||||
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera… | ||||||
| CVE-2026-83457US | high8.1 | — | ||||
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.… | ||||||
| CVE-2026-83461US | high8.2OT elevated | — | ||||
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15.… | ||||||
| CVE-2026-87163US | high8.8 | — | ||||
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul… | ||||||
| CVE-2026-87155US | high8.8 | — | ||||
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-87150US | high8.8 | — | ||||
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily expl… | ||||||
| CVE-2026-83479US | high8.8 | — | ||||
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploit… | ||||||
| CVE-2026-83456US | high8.8 | — | ||||
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15.… | ||||||
| CVE-2026-83454US | high8.8 | — | ||||
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.… | ||||||
| CVE-2026-83444US | high8.8 | — | ||||
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-87165US | high8.8 | — | ||||
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV). The supported version that is a… | ||||||
| CVE-2026-87162US | high8.8 | — | ||||
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2… | ||||||
| CVE-2026-83445US | high8.8 | — | ||||
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… | ||||||
| CVE-2026-83338US | high8.8 | — | ||||
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.… | ||||||
| CVE-2026-83331US | high8.8 | — | ||||
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily… | ||||||
| CVE-2026-83329US | high8.8 | — | ||||
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily… | ||||||
| CVE-2026-83205US | high8.8 | — | ||||
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83194US | high8.8 | — | ||||
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily expl… | ||||||
| CVE-2026-83189US | high8.8 | — | ||||
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83168US | high8.8 | — | ||||
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.… | ||||||
| CVE-2026-83165US | high8.8 | — | ||||
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. E… | ||||||
| CVE-2026-83164US | high8.8 | — | ||||
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.15. E… | ||||||
| CVE-2026-83163US | high8.8 | — | ||||
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.3-1… | ||||||
| CVE-2026-83137US | high8.8 | — | ||||
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83136US | high8.8 | — | ||||
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83125US | high8.8 | — | ||||
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp… | ||||||
| CVE-2026-83124US | high8.8 | — | ||||
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo… | ||||||
| CVE-2026-83122US | high8.8 | — | ||||
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp… | ||||||
| CVE-2026-83121US | high8.8 | — | ||||
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera… | ||||||
| CVE-2026-83120US | high8.8 | — | ||||
Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable… | ||||||
| CVE-2026-83119US | high8.8 | — | ||||
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily ex… | ||||||
| CVE-2026-83090US | high8.8 | — | ||||
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83167US | high7.5 | — | ||||
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-83433US | medium6.5 | — | ||||
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily… | ||||||
| CVE-2026-83425US | high8.5 | — | ||||
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… | ||||||
| CVE-2026-87126US | high7.1 | — | ||||
Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Reports Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… | ||||||
| CVE-2026-83436US | high7.1 | — | ||||
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit… | ||||||
showing 50 of 159
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control100 CVEs
- CWE-269Improper Privilege Management37 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
- CWE-306Missing Authentication for Critical Functionality5 CVEs
- CWE-400Uncontrolled Resource Consumption5 CVEs
- CWE-287Improper Authentication3 CVEs
- CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
- CWE-285Improper Authorization1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)159 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan