CVE-2026-87150

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench), affecting versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Bills of Material data, and attacks may significantly impact additional products.

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a high privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized access to critical data or complete access to all product data and cause a partial denial of service (partial DOS). Attacks may impact additional products (scope change).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to obtain unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all product data.

Vulnerability in Oracle Bills of Material of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.13-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Bills of Material, though difficult to exploit. May impact additional products (scope change). CVSS 8.2.

Vulnerability in Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to take over Oracle Bills of Material, with potential impact on other products.

Vulnerability in Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this, but user interaction is required. Successful attack can result in takeover of Oracle Bills of Material. CVSS 8.0 (Confidentiality, Integrity, Availability).