Yard Management
Monthly
Full system takeover of Oracle Yard Management (E-Business Suite component, versions 12.2.3 through 12.2.15) is achievable by any low-privileged authenticated user over HTTP, with the vendor-reported CVSS impact of C:H/I:H/A:H indicating complete compromise of confidentiality, integrity, and availability. The affected subcomponent is Internal Operations, and Oracle addressed this flaw in the August 2026 Critical Patch Update. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Full compromise of Oracle Yard Management (part of Oracle E-Business Suite, Internal Operations component) is possible for a low-privileged, network-authenticated attacker over HTTP, per Oracle's July 2026 Critical Patch Update. Affecting supported versions 12.2.6 through 12.2.15, the flaw carries a CVSS 3.1 base score of 8.8 and, on successful exploitation, results in complete takeover of the Yard Management application with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Full system takeover of Oracle Yard Management (E-Business Suite component, versions 12.2.3 through 12.2.15) is achievable by any low-privileged authenticated user over HTTP, with the vendor-reported CVSS impact of C:H/I:H/A:H indicating complete compromise of confidentiality, integrity, and availability. The affected subcomponent is Internal Operations, and Oracle addressed this flaw in the August 2026 Critical Patch Update. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Full compromise of Oracle Yard Management (part of Oracle E-Business Suite, Internal Operations component) is possible for a low-privileged, network-authenticated attacker over HTTP, per Oracle's July 2026 Critical Patch Update. Affecting supported versions 12.2.6 through 12.2.15, the flaw carries a CVSS 3.1 base score of 8.8 and, on successful exploitation, results in complete takeover of the Yard Management application with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.