Vulnerabilities

TI-2026-77396 CVE-2026-91337 · GHSA-3p24-w3pm-cxjw

Improper access control in Oracle iProcurement exposes data

LOW 34

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00243 Published 2026-10-20 No fix listed CWE-284

TI-2026-77380 CVE-2026-91321 · GHSA-fgxg-fjhj-vpxg

LOW 35

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-20 No fix listed CWE-284

TI-2026-77375 CVE-2026-91316 · GHSA-9ghw-xq8w-c785

LOW 34

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0043 Published 2026-10-20 No fix listed CWE-284

TI-2026-77319 CVE-2026-91260 · GHSA-2f8c-r5p4-4mrq

LOW 33

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00316 Published 2026-10-20 No fix listed CWE-269