Oracle Purchasing vulnerabilities
4 known CVE vulnerabilities in Oracle Purchasing, translated and rated.
- CVE-2026-70811High
Vulnerability in Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.5-12.2.15. A low-privileged attacker can compromise confidentiality and integrity via HTTP, gaining unauthorized access to critical data and the ability to create, delete, or modify it.
- CVE-2026-70798High
Vulnerability in Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by low privileged attacker with logon to the infrastructure, allowing takeover of Oracle Purchasing.
- CVE-2026-70797High
Vulnerability in Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. Easily exploitable by high privileged attacker with network access via HTTP, allowing takeover of Oracle Purchasing.
- CVE-2026-62491High
Vulnerability in Oracle Purchasing (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data or modify it via HTTP. CVSS score 8.1.