cbcvebase.

Oracle E-Business Suite vulnerabilities

345 known vulnerabilities affecting oracle/e-business_suite.

Total CVEs
345
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH56MEDIUM191LOW42

Vulnerabilities

Page 15 of 18
CVE-2010-2408P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-2408 [MEDIUM] CVE-2010-2408: Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-2246P4MEDIUMCVSS 4.3v11.5.10.2v12.0.4+4 more2011-07-20
CVE-2011-2246 [MEDIUM] CVE-2011-2246: Unspecified vulnerability in the Business Intelligence component in Oracle E-Business Suite 11.5.10. Unspecified vulnerability in the Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Financials.
nvd
CVE-2010-0913P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0913 [MEDIUM] CVE-2010-0913: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11 Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-0912P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0912 [MEDIUM] CVE-2010-0912: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2015-4762P4MEDIUMCVSS 4.0v12.2.3v12.2.42015-10-21
CVE-2015-4762 [MEDIUM] CVE-2015-4762: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching.
nvd
CVE-2013-1524P4MEDIUMCVSS 4.3v12.0.6v12.1.32013-04-17
CVE-2013-1524 [MEDIUM] CVE-2013-1524: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments.
nvd
CVE-2012-3139P4MEDIUMCVSS 4.3v11.5.10.22012-10-16
CVE-2012-3139 [MEDIUM] CVE-2012-3139: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).
nvd
CVE-2009-3416P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-01-13
CVE-2009-3416 [MEDIUM] CVE-2009-3416: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2015-4743P4MEDIUMCVSS 4.0v12.2.32015-07-16
CVE-2015-4743 [MEDIUM] CVE-2015-4743: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities.
nvd
CVE-2015-4728P4MEDIUMCVSS 4.0v12.1.1v12.1.2+3 more2015-07-16
CVE-2015-4728 [MEDIUM] CVE-2015-4728: Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2 Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.
nvd
CVE-2015-4898P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+3 more2015-10-21
CVE-2015-4898 [MEDIUM] CVE-2015-4898: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.
nvd
CVE-2013-3749P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2013-07-17
CVE-2013-3749 [LOW] CVE-2013-3749: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is
nvd
CVE-2011-0791P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2011-04-20
CVE-2011-0791 [MEDIUM] CVE-2011-0791: Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11. Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export.
nvd
CVE-2015-0415P4MEDIUMCVSS 4.0v12.1.32015-01-21
CVE-2015-0415 [MEDIUM] CVE-2015-0415: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.
nvd
CVE-2014-0366P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+2 more2014-01-15
CVE-2014-0366 [MEDIUM] CVE-2014-0366: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Attachments.
nvd
CVE-2016-0459P4MEDIUMCVSS 4.0v11.5.10.2v12.1.3+3 more2016-01-21
CVE-2016-0459 [MEDIUM] CVE-2016-0459: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.
nvd
CVE-2010-3589P4MEDIUMCVSS 4.0v11.5.10.2v12.0.4+5 more2011-01-19
CVE-2010-3589 [MEDIUM] CVE-2010-3589: Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.
nvd
CVE-2014-6523P4MEDIUMCVSS 4.0v12.1.3v12.2.2+2 more2014-10-15
CVE-2014-6523 [MEDIUM] CVE-2014-6523: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface.
nvd
CVE-2014-6479P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+1 more2014-10-15
CVE-2014-6479 [MEDIUM] CVE-2014-6479: Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via vectors related to OC4J Configuration.
nvd
CVE-2013-3747P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+1 more2013-07-17
CVE-2013-3747 [MEDIUM] CVE-2013-3747: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Client System Analyzer.
nvd
← Previous15 / 18Next →
Oracle E-Business Suite vulnerabilities | cvebase