Oracle Configure To Order — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Configure To Order, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-46939 — CVSS 8.1 (high): Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported…