Summary
Oracle heeft 194 kwetsbaarheden verholpen in Oracle E-Business Suite en gerelateerde componenten, specifiek voor versies 12.2.3 tot en met 12.2.15.
Details
Interpretaties
Afhankelijk van de specifieke kwetsbaarheid kunnen deze door een aanvaller met netwerktoegang worden misbruikt om ongeautoriseerde toegang tot gegevens te verkrijgen of om gegevens aan te maken, in te zien, te wijzigen of te verwijderen. In ernstige gevallen kan misbruik leiden tot Remote Code Execution (RCE), waardoor een aanvaller willekeurige code kan uitvoeren op het getroffen systeem.
Een deel van de kwetsbaarheden kan op afstand worden misbruikt zonder authenticatie. Voor andere kwetsbaarheden zijn geldige inloggegevens, specifieke toegangsrechten of gebruikersinteractie vereist. De impact en de voorwaarden voor misbruik verschillen per kwetsbaarheid en getroffen component. De CVSS 3.1-scores lopen op tot de maximale score van 10,0.
Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden in de genoemde versies en componenten van Oracle E-Business Suite te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 43
-
Critical 10.0
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported v…
-
Critical 9.8CVE-2026-101767 Public exploit
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …
-
Critical 9.1
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
Critical 9.1
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions…
-
High 8.8
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported ver…
-
High 8.8
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported v…
-
High 8.8
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported ve…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.8
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA …
-
High 8.8
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA …
-
High 8.8
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve…
-
High 8.8
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported…
-
High 8.8
Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported ve…
-
High 8.8
Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO)…
-
High 8.8
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
High 8.8
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
High 8.8
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
High 8.8
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compone…
-
High 8.8
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). S…
-
High 8.7
Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).…
-
High 8.7
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Sup…
-
High 8.6
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA …
-
High 8.5
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that ar…
-
High 8.5
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported …
-
High 8.5
Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that…
-
High 8.4
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Sup…
-
High 8.3
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Inte…
-
High 8.2
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that…
-
High 8.2
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA …
-
High 8.2
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported vers…
-
High 8.2
Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported vers…
-
High 8.1
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve…
-
High 8.1
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).…
-
High 8.1
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …
-
High 8.1
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported vers…
-
High 8.1
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support…
-
High 8.1
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compone…
-
High 8.1
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported v…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://www.oracle.com/security-alerts/cpuoct2026.html