8.8
High
CVE-2026-87150 Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench)
Description
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Bills of Material 12.2 | 12.2.3 → 12.2.15 | No fix stated |
Other CVEs of Oracle Bills of Material
The 15 CVEs of Oracle Bills of Material →
CVE-2026-101847
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations)
7.5
High
CVE-2026-101823
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations)
7.5
High
CVE-2026-101822
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations)
7.2
High
CVE-2026-87151
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench)
7.7
High