PatchTheCVEpurchasing vulnerabilities and fixes
Recent CVEs affecting purchasing, with upgrade or downgrade steps. 5 tracked.
purchasing has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-08-18. Highest priority: CVE-2026-70947 (score 40/100).
- CVE-2026-70797 HIGH 7.2 UPGRADE Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)
- CVE-2026-70798 HIGH 7.8 UPGRADE Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)
- CVE-2026-70811 HIGH 8.1 UPGRADE Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations)
- CVE-2026-70947 HIGH 7.5 UPGRADE Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue)
- CVE-2026-70948 HIGH 8.8 UPGRADE Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue)
FAQ
How do I fix purchasing vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is purchasing being exploited right now?
None of the tracked purchasing CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which purchasing CVE should I patch first?
CVE-2026-70947 currently ranks highest (40/100): Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue).