cbcvebase.

Oracle Purchasing vulnerabilities

14 known vulnerabilities affecting oracle/purchasing.

Total CVEs
14
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH13MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-87163P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-87163 [HIGH] CWE-269 CVE-2026-87163: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in takeover of Orac
nvd
CVE-2026-70948P2HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70948 [HIGH] CWE-284 CVE-2026-70948: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in takeover of Orac
nvd
CVE-2026-87167P3HIGHCVSS 8.1≥ 12.2.11, ≤ 12.2.152026-09-15
CVE-2026-87167 [HIGH] CWE-284 CVE-2026-87167: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized cr
nvd
CVE-2026-87265P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-87265 [HIGH] CWE-284 CVE-2026-87265: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized cre
nvd
CVE-2026-87166P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-87166 [HIGH] CWE-284 CVE-2026-87166: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized cre
nvd
CVE-2026-87168P3HIGHCVSS 8.1≥ 12.2.10, ≤ 12.2.152026-09-15
CVE-2026-87168 [HIGH] CWE-284 CVE-2026-87168: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized cr
nvd
CVE-2026-62491P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-62491 [HIGH] CWE-284 CVE-2026-62491: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unautho
nvd
CVE-2026-70811P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70811 [HIGH] CWE-284 CVE-2026-70811: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unautho
nvd
CVE-2026-70947P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70947 [HIGH] CWE-284 CVE-2026-70947: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized ac
nvd
CVE-2026-87127P3HIGHCVSS 7.7≥ 12.2.10, ≤ 12.2.152026-09-15
CVE-2026-87127 [HIGH] CWE-200 CVE-2026-87127: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the vulnerability is in Oracle Purchasing, attacks may significa
nvd
CVE-2021-2262P3HIGHCVSS 8.1v12.1.32021-04-22
CVE-2021-2262 [HIGH] CVE-2021-2262: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca). The s Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or m
nvd
CVE-2026-70797P3HIGHCVSS 7.2≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70797 [HIGH] CWE-284 CVE-2026-70797: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in takeov
nvd
CVE-2026-70798P3HIGHCVSS 7.8≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70798 [HIGH] CWE-284 CVE-2026-70798: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Opera Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Purchasing executes to compromise Oracle Purchasing. Successful attacks of thi
nvd
CVE-2024-21132P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.132024-07-16
CVE-2024-21132 [MEDIUM] CWE-284 CVE-2024-21132: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). S Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks require human interaction from a person other than t
nvd
Oracle Purchasing vulnerabilities | cvebase