Oracle Applications Framework vulnerabilities
35 known vulnerabilities affecting oracle/applications_framework.
Total CVEs
35
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH12MEDIUM20LOW1
Vulnerabilities
Page 1 of 2
CVE-2017-3528P3MEDIUMCVSS 5.4PoCv12.1.3v12.2.3+3 more2017-04-24
CVE-2017-3528 [MEDIUM] CWE-601 CVE-2017-3528: Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponen
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac
nvd
CVE-2026-60676P3HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60676 [HIGH] CWE-284 CVE-2026-60676: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Se
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can r
nvd
CVE-2026-60675P3HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60675 [HIGH] CWE-284 CVE-2026-60675: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Se
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can r
nvd
CVE-2026-62534P2HIGHCVSS 8.8≥ 12.2.11, ≤ 12.2.152026-07-21
CVE-2026-62534 [HIGH] CWE-269 CVE-2026-62534: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: We
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability ca
nvd
CVE-2021-2200P3CRITICALCVSS 9.1v12.2.102021-04-22
CVE-2021-2200 [CRITICAL] CVE-2021-2200: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Ho
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unau
nvd
CVE-2026-62546P3CRITICALCVSS 9.1≥ 12.2.8, ≤ 12.2.152026-07-21
CVE-2026-62546 [CRITICAL] CWE-284 CVE-2026-62546: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: We
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. While the vulnerability is in Oracle Ap
nvd
CVE-2026-60768P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60768 [HIGH] CWE-284 CVE-2026-60768: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Gr
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability
nvd
CVE-2022-21566P3HIGHCVSS 7.5≥ 12.2.9, ≤ 12.2.112022-07-19
CVE-2022-21566 [HIGH] CVE-2022-21566: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Di
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.9-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result i
nvd
CVE-2018-3243P3HIGHCVSS 8.2v12.1.3v12.2.3+3 more2018-10-17
CVE-2018-3243 [HIGH] CVE-2018-3243: Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponen
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require hum
nvd
CVE-2026-60774P3HIGHCVSS 7.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60774 [HIGH] CWE-284 CVE-2026-60774: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Se
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl. Advanced]). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vu
nvd
CVE-2020-2890P3HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.9v12.1.32020-04-15
CVE-2020-2890 [HIGH] CVE-2020-2890: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Di
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction
nvd
CVE-2019-2682P3HIGHCVSS 8.2v12.1.3v12.2.3+5 more2019-04-23
CVE-2019-2682 [HIGH] CVE-2019-2682: Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponen
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Fram
nvd
CVE-2020-14534P3HIGHCVSS 8.2v12.2.92020-07-15
CVE-2020-14534 [HIGH] CVE-2020-14534: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Po
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person other
nvd
CVE-2021-2380P3HIGHCVSS 7.6≥ 12.2.3, ≤ 12.2.10v12.1.32021-07-21
CVE-2021-2380 [HIGH] CVE-2021-2380: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require huma
nvd
CVE-2020-14610P3HIGHCVSS 7.6v12.2.92020-07-15
CVE-2020-14610 [HIGH] CWE-79 CVE-2020-14610: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interac
nvd
CVE-2022-21636P3MEDIUMCVSS 6.5≥ 12.2.6, ≤ 12.2.112022-10-18
CVE-2022-21636 [MEDIUM] CVE-2022-21636: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Se
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can
nvd
CVE-2024-21080P3MEDIUMCVSS 6.5≥ 12.2.9, ≤ 12.2.132024-04-16
CVE-2024-21080 [MEDIUM] CVE-2024-21080: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: RE
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services). Supported versions that are affected are 12.2.9-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can resul
nvd
CVE-2025-50071P3MEDIUMCVSS 6.4≥ 12.2.3, ≤ 12.2.142025-07-15
CVE-2025-50071 [MEDIUM] CWE-284 CVE-2025-50071: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: We
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. While the vulnerability is in Oracle Appli
nvd
CVE-2016-3447P4MEDIUMCVSS 6.9v12.1.3v12.2.3+2 more2016-04-21
CVE-2016-3447 [MEDIUM] CVE-2016-3447: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.
nvd
CVE-2020-2666P4MEDIUMCVSS 5.3≥ 12.2.5, ≤ 12.2.92020-01-15
CVE-2020-2666 [MEDIUM] CVE-2020-2666: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Applications Framework. Successful attacks of this vulnerabilit
nvd
1 / 2Next →