Oracle Installed Base vulnerabilities
8 known CVE vulnerabilities in Oracle Installed Base, translated and rated.
- CVE-2017-3361High
A vulnerability in the Oracle Installed Base component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
- CVE-2026-70775Medium
Vulnerability in Oracle Installed Base (component: User Interface) versions 12.2.3-12.2.15. Easily exploitable, allows low privileged attacker via HTTP to perform unauthorized update, read of some data and cause partial denial of service.
- CVE-2026-62473High
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can modify data and cause partial DOS.
- CVE-2026-62472High
Vulnerability in Oracle Installed Base (component: Create Item Instance) in Oracle E-Business Suite. A low-privileged attacker via HTTP can compromise data confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
- CVE-2026-60908High
Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.3-12.2.15. Easily exploitable, allows a low-privileged attacker via HTTP to gain unauthorized access to all data and modify some data.
- CVE-2026-60907Medium
Vulnerability in Oracle Installed Base (component: Create Item Instance) versions 12.2.4-12.2.15. Difficult to exploit; a low-privileged attacker via HTTP can gain unauthorized read, modify access and cause partial denial of service.
- CVE-2026-60904High
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.
- CVE-2026-60738High
Vulnerability in Oracle Installed Base (Create Item Instance component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can take over the system.

