Oracle Applications Framework vulnerabilities
35 known vulnerabilities affecting oracle/applications_framework.
Total CVEs
35
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH12MEDIUM20LOW1
Vulnerabilities
Page 2 of 2
CVE-2025-30718P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.142025-04-15
CVE-2025-30718 [MEDIUM] CVE-2025-30718: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerabilit
nvd
CVE-2020-2866P4MEDIUMCVSS 5.3≥ 12.2.5, ≤ 12.2.92020-04-15
CVE-2020-2866 [MEDIUM] CVE-2020-2866: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability
nvd
CVE-2022-21468P4MEDIUMCVSS 6.1≥ 12.2.4, ≤ 12.2.112022-04-19
CVE-2022-21468 [MEDIUM] CVE-2022-21468: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Po
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported versions that are affected are 12.2.4-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a pers
nvd
CVE-2023-22042P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.3.122023-07-18
CVE-2023-22042 [MEDIUM] CVE-2023-22042: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Di
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a
nvd
CVE-2021-2477P4MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20
CVE-2021-2477 [MEDIUM] CVE-2021-2477: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Se
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerab
nvd
CVE-2025-30711P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.142025-04-15
CVE-2025-30711 [MEDIUM] CWE-284 CVE-2025-30711: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require huma
nvd
CVE-2022-21477P4MEDIUMCVSS 5.4≥ 12.2.6, ≤ 12.2.112022-04-19
CVE-2022-21477 [MEDIUM] CVE-2022-21477: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human intera
nvd
CVE-2026-34298P4MEDIUMCVSS 4.7≥ 12.2.9, ≤ 12.2.152026-04-21
CVE-2026-34298 [MEDIUM] CWE-284 CVE-2026-34298: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Pe
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerabilit
nvd
CVE-2026-60684P4MEDIUMCVSS 4.6≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60684 [MEDIUM] CWE-284 CVE-2026-60684: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Up
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human inte
nvd
CVE-2020-14746P4MEDIUMCVSS 4.7≥ 12.2.3, ≤ 12.2.10v12.1.32020-10-21
CVE-2020-14746 [MEDIUM] CVE-2020-14746: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Po
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human int
nvd
CVE-2020-2566P4MEDIUMCVSS 4.7≥ 12.2.3, ≤ 12.2.9v12.1.32020-01-15
CVE-2020-2566 [MEDIUM] CVE-2020-2566: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: At
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Applications Framework. Successful attacks require h
nvd
CVE-2018-2971P4MEDIUMCVSS 4.3v12.1.3v12.2.3+4 more2018-10-17
CVE-2018-2971 [MEDIUM] CVE-2018-2971: Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponen
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful a
nvd
CVE-2025-53064P4MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.142025-10-21
CVE-2025-53064 [MEDIUM] CWE-284 CVE-2025-53064: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Pe
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability
nvd
CVE-2025-53071P4MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.142025-10-21
CVE-2025-53071 [MEDIUM] CWE-284 CVE-2025-53071: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Up
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerabil
nvd
CVE-2020-14590P4LOWCVSS 2.7≥ 12.2.3, ≤ 12.2.9v12.1.32020-07-15
CVE-2020-14590 [LOW] CVE-2020-14590: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Pa
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Page Request). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability ca
nvd
← Previous2 / 2