Oracle E-Business Suite vulnerabilities
345 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
345
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH56MEDIUM191LOW42
Vulnerabilities
Page 14 of 18
CVE-2010-0871P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-04-13
CVE-2010-0871 [MEDIUM] CVE-2010-0871: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2006-5350P4HIGHCVSS 7.2v11.5.10.22006-10-18
CVE-2006-5350 [HIGH] CVE-2006-5350: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.
nvd
CVE-2004-1367P4MEDIUMCVSS 4.4v11.5.1v11.5.2+7 more2004-08-04
CVE-2004-1367 [MEDIUM] CWE-200 CVE-2004-1367: Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!")
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed
nvd
CVE-2009-0995P4MEDIUMCVSS 4.3v11i10cu22009-04-15
CVE-2009-0995 [MEDIUM] CVE-2009-0995: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-2308P4MEDIUMCVSS 4.3v12.0.6v12.1.2+1 more2011-10-18
CVE-2011-2308 [MEDIUM] CVE-2011-2308: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Online Help.
nvd
CVE-2013-3777P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2013-07-17
CVE-2013-3777 [MEDIUM] CVE-2013-3777: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon.
nvd
CVE-2012-1730P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2012-07-17
CVE-2012-1730 [MEDIUM] CVE-2012-1730: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Password Management.
nvd
CVE-2011-0809P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2011-04-20
CVE-2011-0809 [MEDIUM] CVE-2011-0809: Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.
Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2009-1983P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2009-07-14
CVE-2009-1983 [MEDIUM] CVE-2009-1983: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-3587P4MEDIUMCVSS 4.3v11.5.10.2v12.0.4+5 more2011-01-19
CVE-2010-3587 [MEDIUM] CVE-2010-3587: Unspecified vulnerability in the Oracle Common Applications component in Oracle Applications 11.5.10
Unspecified vulnerability in the Oracle Common Applications component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to User Management.
nvd
CVE-2013-2396P4MEDIUMCVSS 4.3v12.0.6v12.1.32013-04-17
CVE-2013-2396 [MEDIUM] CVE-2013-2396: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via vectors related to HTML OAM client.
nvd
CVE-2013-1501P4MEDIUMCVSS 4.3v11.5.10.22013-04-17
CVE-2013-1501 [MEDIUM] CVE-2013-1501: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2 allows
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Login.
nvd
CVE-2010-0905P4MEDIUMCVSS 4.3v11.5.10.2v12.0.42010-07-13
CVE-2010-0905 [MEDIUM] CVE-2010-0905: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2003-0633P4MEDIUMCVSS 5.0v11.1v11.2+6 more2003-08-27
CVE-2003-0633 [MEDIUM] CVE-2003-0633: Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-B
Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without authentication, such as the GUEST user password and the application server security key.
nvd
CVE-2012-1715P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2012-07-17
CVE-2012-1715 [MEDIUM] CVE-2012-1715: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
nvd
CVE-2009-1982P4MEDIUMCVSS 4.3v11.5.10.2v12.0.62009-07-14
CVE-2009-1982 [MEDIUM] CVE-2009-1982: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2012-5058P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2012-10-17
CVE-2012-5058 [MEDIUM] CVE-2012-5058: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to the Web interface.
nvd
CVE-2012-3138P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2012-10-16
CVE-2012-3138 [MEDIUM] CVE-2012-3138: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface.
nvd
CVE-2013-1528P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-04-17
CVE-2013-1528 [MEDIUM] CVE-2013-1528: Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6,
Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Payroll.
nvd
CVE-2013-0380P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-01-17
CVE-2013-0380 [MEDIUM] CVE-2013-0380: Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0
Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to View Payslip.
nvd