CVE-2026-101649

Vulnerability in Oracle Partner Management (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. It allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data in Oracle Partner Management.

Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to create, delete, or modify critical data and cause partial denial of service.

Vulnerability in Oracle Partner Management (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows low privileged attacker to create, delete, or modify critical data, gain access to it, and cause partial denial of service; attack may impact additional products (scope change).

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to and modify data, with potential impact on additional products (scope change).

Vulnerability in Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. An unauthenticated attacker can access critical data and modify some data via HTTP, requiring user interaction.

Vulnerability in Oracle Partner Management (component: Partner Dashboard) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTPS can gain unauthorized read, write, and delete access to data and cause a partial denial of service.