Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:edi_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductEdi Gateway (2f5e074f-7b8d-5103-8435-991053be1c19)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-61315 vulnerable 2026-07-29 01:06:18.781890 Details available
MEDIUM (4.3)
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Published: 2026-07-21T21:39:22.254Z
Updated: 2026-07-22T18:02:19.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61314 vulnerable 2026-07-29 01:06:18.781624 Details available
HIGH (7.2)
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in takeover of Oracle EDI Gateway. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Published: 2026-07-21T21:39:21.943Z
Updated: 2026-07-22T18:01:38.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61303 vulnerable 2026-07-29 01:06:18.771415 Details available
LOW (1.9)
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle EDI Gateway executes to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle EDI Gateway accessible data. CVSS 3.1 Base Score 1.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Published: 2026-07-21T21:39:20.024Z
Updated: 2026-07-22T18:07:27.520Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.