Oracle Demand Planning vulnerabilities

3 CVEs affecting Oracle Demand Planning, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-70852, published 2026-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3527, published 2016-07-21. Critical severity, CVSS 9.1. EPSS: 4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors…
CVE-2026-70846, published 2026-08-18. Critical severity, CVSS 9.6. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability…
CVE-2026-70852, published 2026-08-18. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability…