Oracle E-Business Suite vulnerabilities

345 known vulnerabilities affecting oracle/e-business_suite.

Total CVEs

345

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL56HIGH56MEDIUM191LOW42

Vulnerabilities

SortPage 12 of 18

CVE-2014-4285P4MEDIUMCVSS 4.3v11.5.10.22014-10-15

CVE-2014-4285 [MEDIUM] CVE-2014-4285: Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration.

nvd

CVE-2024-21148P4MEDIUMCVSS 4.8≥ 12.2.3, ≤ 12.2.132024-07-16

CVE-2024-21148 [MEDIUM] CVE-2024-21148: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Pe Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction fr

nvd

CVE-2015-2610P4MEDIUMCVSS 4.3v12.0.6v12.1.3+2 more2015-07-16

CVE-2015-2610 [MEDIUM] CVE-2015-2610: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows.

nvd

CVE-2015-2630P4MEDIUMCVSS 4.3v10.2v11.5+2 more2015-07-16

CVE-2015-2630 [MEDIUM] CVE-2015-2630: Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12 Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup.

nvd

CVE-2014-4213P4MEDIUMCVSS 4.3v12.0.6v12.1.3+2 more2014-07-17

CVE-2014-4213 [MEDIUM] CVE-2014-4213: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote attackers to affect integrity via unknown vectors.

nvd

CVE-2014-6471P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2014-10-15

CVE-2014-6471 [MEDIUM] CVE-2014-6471: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OAM Diagnostics.

nvd

CVE-2023-22004P4MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.122023-07-18

CVE-2023-22004 [MEDIUM] CVE-2023-22004: Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: R Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology. Successful attacks require human intera

nvd

CVE-2007-0290P4MEDIUMCVSS 5.5v11.5.10.22007-01-17

CVE-2007-0290 [MEDIUM] CVE-2007-0290: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unk Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) Application Object Library (APPS01), (2) Human Resources (APPS03), (3) Payables (APPS04), (4) Trading Community Architecture (APPS05), and (5) Web Applications Desktop Integrator (APPS06).

nvd

CVE-2008-2601P4MEDIUMCVSS 5.5v12.0.42008-07-15

CVE-2008-2601 [MEDIUM] CVE-2008-2601: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unkno Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.

nvd

CVE-2008-5458P4MEDIUMCVSS 5.5v11.52009-01-14

CVE-2008-5458 [MEDIUM] CVE-2008-5458: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

nvd

CVE-2008-3985P4MEDIUMCVSS 5.0v12.0.42008-10-14

CVE-2008-3985 [MEDIUM] CVE-2008-3985: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.

nvd

CVE-2014-6556P4MEDIUMCVSS 4.6v11.5.10.2v12.0.6+4 more2015-01-21

CVE-2014-6556 [MEDIUM] CVE-2014-6556: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.1 Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AD_DDL.

nvd

CVE-2016-0519P4MEDIUMCVSS 4.3v11.5.10.22016-01-21

CVE-2016-0519 [MEDIUM] CVE-2016-0519: Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0507.

nvd

CVE-2016-0507P4MEDIUMCVSS 4.3v11.5.10.22016-01-21

CVE-2016-0507 [MEDIUM] CVE-2016-0507: Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0519.

nvd

CVE-2016-0575P4MEDIUMCVSS 4.3v11.5.10.22016-01-21

CVE-2016-0575 [MEDIUM] CVE-2016-0575: Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11. Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service.

nvd

CVE-2004-1369P4MEDIUMCVSS 5.0v11.5.1v11.5.2+7 more2004-08-04

CVE-2004-1369 [MEDIUM] CVE-2004-1369: The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.

nvd

CVE-2013-3788P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-07-17

CVE-2013-3788 [MEDIUM] CVE-2013-3788: Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.1 Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Supplier Management.

nvd

CVE-2014-6539P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2014-10-15

CVE-2014-6539 [MEDIUM] CVE-2014-6539: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6472.

nvd

CVE-2015-0404P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2015-01-21

CVE-2015-0404 [MEDIUM] CVE-2015-0404: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.

nvd

CVE-2015-0380P4MEDIUMCVSS 4.3v11.5.10.2v12.0.4+8 more2015-01-21

CVE-2015-0380 [MEDIUM] CVE-2015-0380: Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E- Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.

nvd

← Previous12 / 18Next →