Advisories · Technology

Oracle Corporation Oracle Applications Framework.

Every CVE that names Oracle Corporation Oracle Applications Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87408 CVE record

CVSS 8.7 High

Cross-site request forgery in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Cross-site request forgery (CSRF)
Not analysed yet 20 Oct 2026
CVE-2026-87407 CVE record

CVSS 6.5 Medium

Open redirect in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Open redirect
Not analysed yet 20 Oct 2026
CVE-2026-87366 CVE record

CVSS 4.9 Medium

Information disclosure in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Information disclosure
Not analysed yet 20 Oct 2026
CVE-2026-83332 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83331 CVE record

CVSS 8.8 High

Improper privilege management in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83329 CVE record

CVSS 8.8 High

Improper privilege management in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83328 CVE record

CVSS 7.2 High

Improper privilege management in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Privilege escalation
Not analysed yet 15 Sept 2026
CVE-2026-83327 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing authentication in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Authentication bypass
Not analysed yet 15 Sept 2026
CVE-2026-83205 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-83072 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 15 Sept 2026
CVE-2026-62546 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-62534 CVE record

CVSS 8.8 High

Missing authentication in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Privilege escalation
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60774 CVE record

CVSS 7.1 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60768 CVE record

CVSS 8.1 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60684 CVE record

CVSS 4.6 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60676 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-60675 CVE record

CVSS 8.8 High

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Jul 2026
CVE-2026-34298 CVE record

CVSS 4.7 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Apr 2026
CVE-2025-53071 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-53064 CVE record

CVSS 4.3 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 21 Oct 2025
CVE-2025-50090 CVE record

CVSS 5.4 Medium

Cross-site request forgery in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Cross-site request forgery (CSRF)
Not analysed yet 15 Jul 2025
CVE-2025-50071 CVE record

CVSS 6.4 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-30718 CVE record

CVSS 5.4 Medium

Oracle Corporation Oracle Applications Framework: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…
- Oracle Corporation Oracle Applications Framework
Not analysed yet 15 Apr 2025
CVE-2025-30711 CVE record

CVSS 5.4 Medium

Improper access control in Oracle Corporation Oracle Applications Framework
- Oracle Corporation Oracle Applications Framework
- Broken access control
Not analysed yet 15 Apr 2025