Oracle Corporation Iprocurement vulnerabilities
6 known vulnerabilities affecting oracle_corporation/iprocurement.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-91321P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-91321 [HIGH] CVE-2026-91321: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Managem
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise iProcurement. Successful attacks of this vulnerability can result in takeover of iProcure
nvd
CVE-2026-91337P3HIGHCVSS 7.4≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-91337 [HIGH] CVE-2026-91337: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise iProcurement. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2018-3151P3HIGHCVSS 7.5v12.1.1v12.1.2+6 more2018-10-17
CVE-2018-3151 [HIGH] CVE-2018-3151: Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Conte
Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iProcurement. Succe
nvd
CVE-2026-91260P3HIGHCVSS 7.2≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-91260 [HIGH] CVE-2026-91260: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager C
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise iProcurement. Successful attacks of this vulnerability can result in takeover of iProcu
nvd
CVE-2026-91316P3HIGHCVSS 7.2≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-91316 [HIGH] CVE-2026-91316: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager C
Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful attacks of this vulnerability can result in takeover of iProc
nvd
CVE-2023-21973P4MEDIUMCVSS 5.4v12.2.3-12.2.122023-04-18
CVE-2023-21973 [MEDIUM] CVE-2023-21973: Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Ma
Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iProcurement. Successful attacks require human interaction from a person
nvd