Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Oracle Applications Framework — oracle.com/security-alerts/cpujul2026.html Clear all filters
TI-2026-44660 CVE-2026-62546 · GHSA-h45q-f2rp-2rf6

Improper access control in Oracle Applications Framework

Priority MEDIUM 42

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284
TI-2026-43434 CVE-2026-60774 · GHSA-3h92-24v4-85mc

Improper access control in Oracle Applications Framework

Priority LOW 31

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.003 Published 2026-07-21 No fix listed CWE-284
TI-2026-43428 CVE-2026-60768 · GHSA-45fj-7pmr-8hr5

Improper access control in Oracle Applications Framework

Priority LOW 37

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284
TI-2026-43347 CVE-2026-60684 · GHSA-7jq5-m4p2-vh3p

Improper access control in Oracle Applications Framework

Priority LOW 21

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments).

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00208 Published 2026-07-21 No fix listed CWE-284
TI-2026-43339 CVE-2026-60676 · GHSA-rfqc-v2rx-54p2

Improper access control in Oracle Applications Framework

Priority MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284
TI-2026-43338 CVE-2026-60675 · GHSA-8v2h-7fvm-w28p

Improper access control in Oracle Applications Framework

Priority MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284