Oracle Order Management vulnerabilities
14 known CVE vulnerabilities in Oracle Order Management, translated and rated.
- CVE-2026-101538Medium
Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Order Management accessible data.
- CVE-2026-91357Medium
Vulnerability in Oracle Order Management (component Transaction Entry) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit attack by a low-privileged attacker with network access via HTTP can result in unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-60746Medium
Vulnerability in Oracle Order Management within Oracle E-Business Suite, component Product Diagnostic Tools, affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all data and unauthorized update, insert, or delete access to some data.
- CVE-2026-101857Medium
Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.
- CVE-2026-101856Medium
Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.
- CVE-2026-87158High
Vulnerability in Oracle Order Management (component: Enterprise Command Center) in version V16. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTP.
- CVE-2026-87157High
Vulnerability in Oracle Order Management (component: Product Diagnostic Tools) in versions 12.2.4-12.2.15. A low-privileged attacker can create, delete, or modify critical data and gain full access via HTTP.
- CVE-2026-83116High
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affected supported versions are 12.2.5-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Order Management, with potential significant impact on additional products (scope change).
- CVE-2026-70932High
Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. A high-privileged attacker with local access can gain unauthorized access to critical data and modify or delete it, and attacks may impact additional products.
- CVE-2026-70930High
Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order Management. Successful attacks can result in takeover of Oracle Order Management.
- CVE-2026-70760High
Vulnerability in Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Affects versions 12.2.3-12.2.15. Difficult to exploit by low-privileged attacker via HTTP, with potential impact on other products (scope change). Allows unauthorized access to critical data and unauthorized update/insert/delete of some data.
- CVE-2026-61115High
Vulnerability in Oracle Order Management (Oracle E-Business Suite) allows a high-privileged attacker with network access via HTTP to take over the system. Affects versions 12.2.3-12.2.15.
- CVE-2026-60864Medium
Vulnerability in Oracle Order Management (Product Diagnostic Tools) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, affecting additional products.
- CVE-2026-60862Medium
Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. An authenticated attacker with high privileges can access critical data via HTTP, with potential impact on other products (scope change).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

