Skip to content
fr Sign in
5.3 Medium

CVE-2026-91357 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry)

Description

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle Order Management 12.2 12.2.3 → 12.2.15 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Oracle Order Management

The 19 CVEs of Oracle Order Management →
CVE-2026-83139 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 6.5 Medium CVE-2026-60746 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 5.9 Medium CVE-2026-101857 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 6.5 Medium CVE-2026-101856 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 6.5 Medium
Track this CVE