Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:order_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductOrder Management (17ea8f71-2bf3-58d2-8ca6-c7e2f94bbd68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-91357 vulnerable 2026-11-03 10:15:57.391414 Details available
MEDIUM (5.3)
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:25:30.833Z
Updated: 2026-10-28T17:03:33.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83139 vulnerable 2026-11-03 10:15:38.539981 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:23:31.997Z
Updated: 2026-10-27T12:34:34.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60746 vulnerable 2026-11-03 10:15:25.775869 Details available
MEDIUM (5.9)
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Order Management accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).
Published: 2026-10-20T21:23:25.058Z
Updated: 2026-10-27T12:07:25.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101832 vulnerable 2026-11-03 10:15:22.679107 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:23:13.800Z
Updated: 2026-10-27T11:21:02.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101857 vulnerable 2026-11-03 10:15:22.489256 Details available
MEDIUM (6.5)
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Order Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20T21:23:22.059Z
Updated: 2026-10-27T11:59:56.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101856 vulnerable 2026-11-03 10:15:22.202027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-87157 vulnerable 2026-10-13 12:28:48.385221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83116 vulnerable 2026-10-13 12:28:38.065923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61115 vulnerable 2026-07-29 01:03:24.214634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61112 vulnerable 2026-07-29 01:03:24.213687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.