Oracle Applications Manager vulnerabilities

18 known vulnerabilities affecting oracle/applications_manager.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

HIGH4MEDIUM14

Vulnerabilities

Page 1 of 1

CVE-2025-53058MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.142025-10-21

CVE-2025-53058 [MEDIUM] CWE-284 CVE-2025-53058: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Appl Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require h

nvd

CVE-2021-35566HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20

CVE-2021-35566 [HIGH] CVE-2021-35566: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can re

nvd

CVE-2021-35582MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20

CVE-2021-35582 [MEDIUM] CVE-2021-35582: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction

nvd

CVE-2021-35580MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20

CVE-2021-35580 [MEDIUM] CVE-2021-35580: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interactio

nvd

CVE-2021-35581MEDIUMCVSS 4.7≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20

CVE-2021-35581 [MEDIUM] CVE-2021-35581: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interactio

nvd

CVE-2021-35569MEDIUMCVSS 4.9≥ 12.2.3, ≤ 12.2.10v12.1.32021-10-20

CVE-2021-35569 [MEDIUM] CVE-2021-35569: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can

nvd

CVE-2021-2275MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.10v12.1.32021-04-22

CVE-2021-2275 [MEDIUM] CVE-2021-2275: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can

nvd

CVE-2020-14761MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.7v12.1.32020-10-21

CVE-2020-14761 [MEDIUM] CVE-2020-14761: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Orac Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of thi

nvd

CVE-2020-14826MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.10v12.1.32020-10-21

CVE-2020-14826 [MEDIUM] CVE-2020-14826: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability

nvd

CVE-2020-14811MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.10v12.1.32020-10-21

CVE-2020-14811 [MEDIUM] CVE-2020-14811: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP EBS Integration). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerab

nvd

CVE-2019-2825MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.8v12.1.32019-07-23

CVE-2019-2825 [MEDIUM] CVE-2019-2825: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of

nvd

CVE-2018-3235HIGHCVSS 8.2v12.1.3v12.2.3+4 more2018-10-17

CVE-2018-3235 [HIGH] CVE-2018-3235: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: None). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require

nvd

CVE-2018-3237MEDIUMCVSS 5.3v12.1.3v12.2.3+4 more2018-10-17

CVE-2018-3237 [MEDIUM] CVE-2018-3237: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attac

nvd

CVE-2018-2996HIGHCVSS 7.5v12.1.3v12.2.3+4 more2018-07-18

CVE-2018-2996 [HIGH] CVE-2018-2996: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. S

nvd

CVE-2017-10144HIGHCVSS 7.5v12.1.32017-08-08

CVE-2017-10144 [HIGH] CVE-2017-10144: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability

nvd

CVE-2017-3277MEDIUMCVSS 4.9v12.1.3v12.2.3+3 more2017-01-27

CVE-2017-3277 [MEDIUM] CWE-200 CVE-2017-3277: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: OAM Client). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks

cvelistv5nvd

CVE-2016-3525MEDIUMCVSS 5.9v12.1.32016-07-21

CVE-2016-3525 [MEDIUM] CVE-2016-3525: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality via vectors related to Cookie Management.

nvd

CVE-2016-0531MEDIUMCVSS 4.0v12.1.32016-01-21

CVE-2016-0531 [MEDIUM] CVE-2016-0531: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Oracle Diagnostics Interfaces.

nvd