CVE-2026-101856

Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Order Management accessible data.

Vulnerability in Oracle Order Management (component Transaction Entry) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.

Vulnerability in Oracle Order Management within Oracle E-Business Suite, component Product Diagnostic Tools, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data and unauthorized update, insert, or delete access to some data.

Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Order Management (component: Enterprise Command Center) in version V16. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTP.

Vulnerability in Oracle Order Management (component: Product Diagnostic Tools) in versions 12.2.4-12.2.15. A low-privileged attacker can create, delete, or modify critical data and gain full access via HTTP.

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affected supported versions are 12.2.5-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Order Management, with potential significant impact on additional products (scope change).

Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. A high-privileged attacker with local access can gain unauthorized access to critical data and modify or delete it, and attacks may impact additional products.

Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks can result in takeover of Oracle Order Management.

Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. Difficult to exploit by low-privileged attacker via HTTP, with potential impact on other products (scope change). Allows unauthorized access to critical data and unauthorized update/insert/delete of some data.