cbcvebase.

Oracle E-Business Suite vulnerabilities

458 known vulnerabilities affecting oracle/e-business_suite.

Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49

Vulnerabilities

Page 11 of 23
CVE-2006-0278P4CRITICALCVSS 10.0v11.5.92006-01-18
CVE-2006-0278 [CRITICAL] CVE-2006-0278: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspeci Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS02 in the (a) CRM Technical Foundation component; (2) APPS03 in the (b) iProcurement component; and (3) APPS04, (4) APPS05, and (5) APPS06 in the Oracle Application Object Library component
nvd
CVE-2008-0345P4CRITICALCVSS 10.0v11.5.9v11.5.10+5 more2008-01-17
CVE-2008-0345 [CRITICAL] CVE-2008-0345: Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.
nvd
CVE-2007-2126P4CRITICALCVSS 10.0v11.5.10.22007-04-18
CVE-2007-2126 [CRITICAL] CVE-2007-2126: Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1) Common Applications (APPS01) and (2) iProcurement (APPS02).
nvd
CVE-2018-2865P4MEDIUMCVSS 5.3v12.1.1v12.1.2+6 more2018-04-19
CVE-2018-2865 [MEDIUM] CVE-2018-2865: Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Conso Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Le
nvd
CVE-2018-2873P4MEDIUMCVSS 5.3v12.1.1v12.1.2+6 more2018-04-19
CVE-2018-2873 [MEDIUM] CVE-2018-2873: Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Accou Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger.
nvd
CVE-2018-2872P4MEDIUMCVSS 5.3v12.1.1v12.1.2+6 more2018-04-19
CVE-2018-2872 [MEDIUM] CVE-2018-2872: Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Accou Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger.
nvd
CVE-2018-2866P4MEDIUMCVSS 5.3v12.1.1v12.1.2+6 more2018-04-19
CVE-2018-2866 [MEDIUM] CVE-2018-2866: Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Conso Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Le
nvd
CVE-2026-61083P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61083 [MEDIUM] CWE-284 CVE-2026-61083: Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Ap Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance Management. Successful attacks of this vulnerability can
nvd
CVE-2026-60310P3MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60310 [MEDIUM] CWE-284 CVE-2026-60310: Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Ap Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Performance Management. Successful attacks of this vulnerability can
nvd
CVE-2026-61200P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61200 [MEDIUM] CWE-284 CVE-2026-61200: Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can
nvd
CVE-2026-61221P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61221 [MEDIUM] CWE-284 CVE-2026-61221: Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs) Vulnerability in the Oracle Item Master product of Oracle E-Business Suite (component: iSet-up bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Item Master. Successful attacks of this vulnerability can result in unauthoriz
nvd
CVE-2026-61264P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61264 [MEDIUM] CWE-284 CVE-2026-61264: Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RD Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: RDBMS and UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Call Center Technology. Successful attacks of this vulnerability ca
nvd
CVE-2026-61080P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61080 [MEDIUM] CWE-284 CVE-2026-61080: Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (compon Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks of t
nvd
CVE-2010-0859P4MEDIUMCVSS 6.4v11.5.10.22010-04-13
CVE-2010-0859 [MEDIUM] CVE-2010-0859: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 ATG RUP6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2012-3190P4MEDIUMCVSS 6.4v11.5.10.2v12.0.6+3 more2013-01-17
CVE-2012-3190 [MEDIUM] CVE-2012-3190: Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11 Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity, related to UWQ Server Issues.
nvd
CVE-2014-6583P4MEDIUMCVSS 6.4v11.5.10.2v12.0.4+5 more2015-01-21
CVE-2014-6583 [MEDIUM] CVE-2014-6583: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12 Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience.
nvd
CVE-2026-60775P4MEDIUMCVSS 6.7≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60775 [MEDIUM] CWE-284 CVE-2026-60775: Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Sup Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Pasta executes to compromise Pasta. Successful attacks of this vulnerability can result in take
nvd
CVE-2006-1883P4CRITICALCVSS 10.0v11.5.10.12006-04-20
CVE-2006-1883 [CRITICAL] CVE-2006-1883: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln# APPS05.
nvd
CVE-2026-62444P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62444 [MEDIUM] CWE-285 CVE-2026-62444: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks require human inte
nvd
CVE-2026-60802P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60802 [MEDIUM] CWE-284 CVE-2026-60802: Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: I Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks require human
nvd
← Previous11 / 23Next →
Oracle E-Business Suite vulnerabilities | cvebase