Oracle Customer Relationship Management Technical Foundation vulnerabilities

28 known vulnerabilities affecting oracle/customer_relationship_management_technical_foundation.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

HIGH15MEDIUM13

Vulnerabilities

Page 1 of 2

CVE-2024-21086MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21086 [MEDIUM] CVE-2024-21086: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction fro

nvd

CVE-2024-20939MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.132024-02-17

CVE-2024-20939 [MEDIUM] CVE-2024-20939: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Admin Console). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can re

nvd

CVE-2020-14774HIGHCVSS 7.5≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14774 [HIGH] CVE-2020-14774: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this v

nvd

CVE-2020-14850HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.10v12.1.32020-10-21

CVE-2020-14850 [HIGH] CVE-2020-14850: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Flex Fields). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human inte

nvd

CVE-2020-14823MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14823 [MEDIUM] CVE-2020-14823: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3 - 12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can r

nvd

CVE-2020-2881HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2881 [HIGH] CVE-2020-2881: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a p

nvd

CVE-2020-2886MEDIUMCVSS 4.7≥ 12.2.3, ≤ 12.2.9v12.1.32020-04-15

CVE-2020-2886 [MEDIUM] CVE-2020-2886: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interac

nvd

CVE-2020-2889MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.9v12.1.32020-04-15

CVE-2020-2889 [MEDIUM] CVE-2020-2889: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability

nvd

CVE-2020-2653HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.9v12.1.32020-01-15

CVE-2020-2653 [HIGH] CVE-2020-2653: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human interact

nvd

CVE-2020-2651HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.9v12.1.32020-01-15

CVE-2020-2651 [HIGH] CVE-2020-2651: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human interact

nvd

CVE-2020-2652HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.9v12.1.32020-01-15

CVE-2020-2652 [HIGH] CVE-2020-2652: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human interact

nvd

CVE-2020-2657MEDIUMCVSS 4.7≥ 12.2.3, ≤ 12.2.9v12.1.32020-01-15

CVE-2020-2657 [MEDIUM] CVE-2020-2657: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation. Successful attacks require human intera

nvd

CVE-2018-3017HIGHCVSS 8.2v12.1.1v12.1.2+6 more2018-07-18

CVE-2018-3017 [HIGH] CVE-2018-3017: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundat

nvd

CVE-2018-2993HIGHCVSS 8.2v12.1.1v12.1.2+6 more2018-07-18

CVE-2018-2993 [HIGH] CVE-2018-2993: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundat

nvd

CVE-2017-10387MEDIUMCVSS 4.3v12.1.3v12.2.3+4 more2017-10-19

CVE-2017-10387 [MEDIUM] CVE-2017-10387: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Success

nvd

CVE-2017-10185HIGHCVSS 8.2v12.1.3v12.2.3+3 more2017-08-08

CVE-2017-10185 [HIGH] CVE-2017-10185: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful at

nvd

CVE-2017-10180HIGHCVSS 8.2v12.1.3v12.2.3+3 more2017-08-08

CVE-2017-10180 [HIGH] CVE-2017-10180: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: CMRO). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks requi

nvd

CVE-2017-10143HIGHCVSS 8.2v12.1.3v12.2.3+3 more2017-08-08

CVE-2017-10143 [HIGH] CVE-2017-10143: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attack

nvd

CVE-2017-3418HIGHCVSS 8.2v12.1.32017-01-27

CVE-2017-3418 [HIGH] CVE-2017-3418: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from

nvd

CVE-2017-3420HIGHCVSS 8.2v12.1.32017-01-27

CVE-2017-3420 [HIGH] CVE-2017-3420: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from

nvd

1 / 2Next →