Oracle EDI Gateway vulnerabilities
10 known CVE vulnerabilities in Oracle EDI Gateway, translated and rated.
- CVE-2026-101534High
Vulnerability in the Oracle EDI Gateway product (component: EDI) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and unauthorized update, insert, or delete access to some Oracle EDI Gateway accessible data, with potential impact on additional products.
- CVE-2026-101533Medium
Vulnerability in Oracle EDI Gateway (All Miscellaneous EDI Issues component) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to take over Oracle EDI Gateway.
- CVE-2026-101532High
Vulnerability in the Oracle EDI Gateway product (component: All Miscellaneous EDI Issues) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.
- CVE-2026-101519High
Vulnerability in Oracle EDI Gateway (component All Miscellaneous EDI Issues) affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle EDI Gateway.
- CVE-2026-61316Medium
In Oracle EDI Gateway (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
- CVE-2026-61315Medium
In Oracle EDI Gateway (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, there is an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
- CVE-2026-61314High
Vulnerability in Oracle EDI Gateway (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
- CVE-2026-61303Low
Vulnerability in Oracle EDI Gateway (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high-privileged attacker with local logon, allows unauthorized read access to a subset of data.
- CVE-2026-60756High
Vulnerability in Oracle EDI Gateway (component: All Miscellaneous EDI Issues) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to take over the system.
- CVE-2026-60710High
Vulnerability in Oracle EDI Gateway (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

