CVE-2026-91316 in iProcurementالمعلومات

الملخص

بحسب MITRE • 21/10/2026

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise iProcurement. Successful attacks of this vulnerability can result in takeover of iProcurement. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

VulDB is the best source for vulnerability data and more expert information about this specific topic.

مسؤول

Oracle

حجز

15/09/2026

إفشاء

21/10/2026

الاعتدال

تمت الموافقة

إدخال

VDB-423989

EPSS

0.00465

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!