Oracle Capacity vulnerabilities
7 known CVE vulnerabilities in Oracle Capacity, translated and rated.
- CVE-2026-101543High
Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity.
- CVE-2026-101542High
Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity.
- CVE-2026-101541High
Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Capacity accessible data, with potential impact on additional products.
- CVE-2026-101540High
Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Capacity accessible data, with potential impact on additional products.
- CVE-2026-101398High
Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).
- CVE-2026-101387High
Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).
- CVE-2026-60923High
Vulnerability in Oracle Capacity (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data, and attacks may impact additional products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

