Oracle Bills Of Material vulnerabilities

13 CVEs affecting Oracle Bills Of Material, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-87151, published 2026-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-2288, published 2021-04-22. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability…
CVE-2026-87150, published 2026-09-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-47031, published 2026-07-21. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability…
CVE-2026-83449, published 2026-09-15. High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83450, published 2026-09-15. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-83448, published 2026-09-15. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83447, published 2026-09-15. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-61327, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Easily exploitable…
CVE-2026-60807, published 2026-07-21. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-87151, published 2026-09-15. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…

Latest

CVE-2026-83435, published 2026-09-15. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.13-12.2.15. Difficult to exploit…
CVE-2026-70718, published 2026-08-18. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-61283, published 2026-07-21. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Web Services). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability…