CWE-284

Improper Access Control

PillarIncomplete

Description

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Hierarchy (View 1000)

Parents

none

Children

CWE-1191
CWE-1220
CWE-1224
CWE-1231
CWE-1233
CWE-1252
CWE-1257
CWE-1259
CWE-1260
CWE-1262
CWE-1263
CWE-1267
CWE-1270
CWE-1274
CWE-1276
CWE-1280
CWE-1283
CWE-1290
CWE-1292
CWE-1294
CWE-1296
CWE-1304
CWE-1311
CWE-1312
CWE-1313
CWE-1315
CWE-1316
CWE-1317
CWE-1320
CWE-1323
CWE-1334
CWE-269
CWE-282
CWE-285
CWE-286
CWE-287
CWE-346
CWE-749
CWE-923

Related attack patterns (CAPEC)

CAPEC-19 · CAPEC-441 · CAPEC-478 · CAPEC-479 · CAPEC-502 · CAPEC-503 · CAPEC-536 · CAPEC-546 · CAPEC-550 · CAPEC-551 · CAPEC-552 · CAPEC-556 · CAPEC-558 · CAPEC-562 · CAPEC-563 · CAPEC-564 · CAPEC-578

CVEs mapped to this weakness (6,523)

page 291 of 327

CVE	Vendor / Product	Sev	CVSS	Published	Description
CVE-2026-60825	Oracle Corporation Isupport	Med	6.6	Jul 21, 2026	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60824	Oracle Corporation Isupport	Hig	7.7	Jul 21, 2026	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60823	Oracle Corporation Isupport	Hig	7.4	Jul 21, 2026	Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-60817	Oracle Corporation Istore	Hig	8.1	Jul 21, 2026	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60816	Oracle Corporation Istore	Med	5.3	Jul 21, 2026	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore.…
CVE-2026-60815	Oracle Corporation Istore	Med	6.1	Jul 21, 2026	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60813	Oracle Corporation Istore	Hig	7.2	Jul 21, 2026	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60807	Oracle Corporation Bills Of Material	Hig	8.0	Jul 21, 2026	Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60806	Oracle Corporation Cost Management	Hig	7.5	Jul 21, 2026	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Errors). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-60805	Oracle Corporation Cost Management	Med	6.2	Jul 21, 2026	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60804	Oracle Corporation E Business Suite	Low	2.0	Jul 21, 2026	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60802	Oracle Corporation Oracle E-Business Suite	Med	6.1	Jul 21, 2026	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-60801	Oracle Corporation E Business Suite	Med	5.9	Jul 21, 2026	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2026-60795	Oracle Corporation iSetup	Med	6.8	Jul 21, 2026	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP…
CVE-2026-60794	Oracle Corporation TeleSales	Med	5.4	Jul 21, 2026	Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60793	Oracle Corporation TeleSales	Hig	8.1	Jul 21, 2026	Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60790	Oracle Corporation Sales Offline	Hig	8.0	Jul 21, 2026	Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60789	Oracle Corporation Sales Offline	Hig	8.8	Jul 21, 2026	Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60788	Oracle Corporation Sales Offline	Hig	8.3	Jul 21, 2026	Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60787	Oracle Corporation Receivables	Hig	7.2	Jul 21, 2026	Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…

CVE-2026-60825MedJul 21, 2026
Oracle Corporation
Isupport
risk 0.00cvss 6.6epss 0.00
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60824HigJul 21, 2026
Oracle Corporation
Isupport
risk 0.00cvss 7.7epss 0.00
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60823HigJul 21, 2026
Oracle Corporation
Isupport
risk 0.00cvss 7.4epss 0.00
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2026-60817HigJul 21, 2026
Oracle Corporation
Istore
risk 0.00cvss 8.1epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60816MedJul 21, 2026
Oracle Corporation
Istore
risk 0.00cvss 5.3epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore.…
CVE-2026-60815MedJul 21, 2026
Oracle Corporation
Istore
risk 0.00cvss 6.1epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60813HigJul 21, 2026
Oracle Corporation
Istore
risk 0.00cvss 7.2epss 0.00
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iStore. …
CVE-2026-60807HigJul 21, 2026
Oracle Corporation
Bills Of Material
risk 0.00cvss 8.0epss 0.00
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60806HigJul 21, 2026
Oracle Corporation
Cost Management
risk 0.00cvss 7.5epss 0.00
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Costing Transaction Errors). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2026-60805MedJul 21, 2026
Oracle Corporation
Cost Management
risk 0.00cvss 6.2epss 0.00
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60804LowJul 21, 2026
Oracle Corporation
E Business Suite
risk 0.00cvss 2.0epss 0.00
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60802MedJul 21, 2026
Oracle Corporation
Oracle E-Business Suite
risk 0.00cvss 6.1epss 0.00
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2026-60801MedJul 21, 2026
Oracle Corporation
E Business Suite
risk 0.00cvss 5.9epss 0.00
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2026-60795MedJul 21, 2026
Oracle Corporation
iSetup
risk 0.00cvss 6.8epss 0.00
Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP…
CVE-2026-60794MedJul 21, 2026
Oracle Corporation
TeleSales
risk 0.00cvss 5.4epss 0.00
Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60793HigJul 21, 2026
Oracle Corporation
TeleSales
risk 0.00cvss 8.1epss 0.00
Vulnerability in the Oracle TeleSales product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2026-60790HigJul 21, 2026
Oracle Corporation
Sales Offline
risk 0.00cvss 8.0epss 0.00
Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2026-60789HigJul 21, 2026
Oracle Corporation
Sales Offline
risk 0.00cvss 8.8epss 0.00
Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60788HigJul 21, 2026
Oracle Corporation
Sales Offline
risk 0.00cvss 8.3epss 0.00
Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2026-60787HigJul 21, 2026
Oracle Corporation
Receivables
risk 0.00cvss 7.2epss 0.00
Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…