Threats affecting pkg:maven/com.oracle/product-hub

8 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2026-101854Oracle Product Hub · Improper Access Control High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-101854 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-101853Oracle Product Hub · Improper Access Control High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-101853 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-101852Oracle Product Hub · Improper Access Control High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-101852 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-10-20
High	7.1	EPSS 0.3%	CVE-2026-87156Oracle Product Hub · Improper Access Control High7.1EPSS 0.3%2026-09-15CVE Database V5CVE-2026-87156 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data as well as unauthorized update, insert or delete access to some of Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N). EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-09-15
High	8.8	EPSS 0.4%	CVE-2026-87155Oracle Product Hub · Improper Privilege Management High8.8EPSS 0.4%2026-09-15CVE Database V5CVE-2026-87155 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-269	CVE Database V5	2026-09-15
High	8.1	EPSS 0.4%	CVE-2026-87154Oracle Product Hub · Improper Access Control High8.1EPSS 0.4%2026-09-15CVE Database V5CVE-2026-87154 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-09-15
High	8.1	EPSS 0.4%	CVE-2026-87153Oracle Product Hub · Improper Access Control High8.1EPSS 0.4%2026-09-15CVE Database V5CVE-2026-87153 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-09-15
High	7.2	EPSS 0.5%	CVE-2026-83440Oracle Product Hub · Improper Privilege Management High7.2EPSS 0.5%2026-09-15CVE Database V5CVE-2026-83440 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in takeover of Oracle Product Hub. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-269	CVE Database V5	2026-09-15

Page 1 of 1