Oracle iSupport vulnerabilities
14 known CVE vulnerabilities in Oracle iSupport, translated and rated.
- CVE-2017-10415High
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-10174High
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3371High
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Attacks require human interaction, potentially leading to unauthorized access to critical data.
- CVE-2017-3370High
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2017-3369High
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction and can lead to unauthorized access to critical data.
- CVE-2026-46946Critical
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle iSupport. Attacks may significantly impact additional products, increasing the scope of the threat.
- CVE-2026-46945Critical
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle iSupport. Attacks may significantly impact additional products, changing the scope of the threat.
- CVE-2026-46944Critical
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. Easily exploitable by a high privileged attacker with network access via HTTP, potentially leading to takeover of Oracle iSupport.
- CVE-2026-91339Medium
Vulnerability in iSupport (component Service Requests) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-91257Medium
Vulnerability in Oracle iSupport (Service Requests component) versions 12.2.3-12.2.15 allows a low-privileged network attacker via HTTP to gain unauthorized access to critical data or all iSupport data.
- CVE-2026-61257Medium
Vulnerability in Oracle iSupport (Call Back component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
- CVE-2026-60827High
Vulnerability in Oracle iSupport (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, requiring user interaction, to gain unauthorized create, delete, or modify access to critical data, potentially affecting other products.
- CVE-2026-60824High
Vulnerability in Oracle iSupport (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can access critical data, with impact on other products.
- CVE-2026-60685Medium
Vulnerability in Oracle iSupport (Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, requiring user interaction, can compromise data and affect other products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

