Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:product_hub:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductProduct Hub (ac62cd1d-8ca0-51d3-897c-cb183e1fb6a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-83393 vulnerable 2026-11-03 10:15:38.456698 Details available
HIGH (8.5)
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).
Published: 2026-10-20T21:23:43.955Z
Updated: 2026-10-29T10:45:48.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101854 vulnerable 2026-11-03 10:15:22.736947 Details available
HIGH (8.8)
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-10-20T21:23:21.003Z
Updated: 2026-10-29T10:45:49.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101855 vulnerable 2026-11-03 10:15:22.655811 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:23:21.369Z
Updated: 2026-10-27T11:58:02.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101853 vulnerable 2026-11-03 10:15:22.425356 Details available
HIGH (8.8)
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-10-20T21:23:20.636Z
Updated: 2026-10-29T10:45:49.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101852 vulnerable 2026-11-03 10:15:22.156991 Details available
HIGH (8.8)
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-10-20T21:23:20.151Z
Updated: 2026-10-29T10:45:49.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87153 vulnerable 2026-10-13 12:28:48.420897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87156 vulnerable 2026-10-13 12:28:48.323499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87154 vulnerable 2026-10-13 12:28:48.213503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83486 vulnerable 2026-10-13 12:28:38.010651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83487 vulnerable 2026-10-13 12:28:37.918612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83485 vulnerable 2026-10-13 12:28:37.752062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83441 vulnerable 2026-10-13 12:28:37.702504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61311 vulnerable 2026-09-16 04:32:45.269131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61310 vulnerable 2026-09-16 04:32:44.937002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61312 vulnerable 2026-07-29 01:06:18.781256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61275 vulnerable 2026-07-29 01:06:18.689464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61274 vulnerable 2026-07-29 01:06:18.689114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47019 vulnerable 2026-07-29 00:54:59.707421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53043 vulnerable 2026-06-08 07:31:13.853937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21252 vulnerable 2026-06-08 06:27:32.323458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-2289 vulnerable 2026-06-08 05:31:46.220919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.