CVE-2026-87156

Vulnerability in Oracle Product Hub (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can compromise the system over HTTP, leading to full takeover.

Vulnerability in Oracle Product Hub (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can create, delete, or modify critical data and gain full access via HTTP.

Vulnerability in Oracle Product Hub (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can create, delete, or modify critical data and gain full access via HTTP.

Vulnerability in Oracle Product Hub within Oracle E-Business Suite (component: Item Catalog) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).

Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.

Vulnerability in Oracle Product Hub (component: Item Catalog) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle Product Hub.

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the product.

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise the product.

Vulnerability in Oracle E-Business Suite Oracle Product Hub product (component: Internal Operations) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.

Vulnerability in Oracle Product Hub of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can compromise Oracle Product Hub. Easily exploitable, CVSS 7.2.