Skip to content
fr Sign in
6.5 Medium

CVE-2026-101538 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools)

Description

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle Order Management 12.2 12.2.3 → 12.2.15 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Oracle Order Management

The 19 CVEs of Oracle Order Management →
CVE-2026-91357 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry) 5.3 Medium CVE-2026-83139 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 6.5 Medium CVE-2026-60746 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 5.9 Medium CVE-2026-101857 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools) 6.5 Medium
Track this CVE