Oracle E-Business Suite vulnerabilities
345 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
345
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH56MEDIUM191LOW42
Vulnerabilities
Page 16 of 18
CVE-2007-0285P4MEDIUMCVSS 5.0v11.5.12007-01-17
CVE-2007-0285 [MEDIUM] CVE-2007-0285: Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaborat
Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and Applications 11.5.10CU2 has unknown impact and attack vectors related to Oracle Reports Developer, aka REP01.
nvd
CVE-2018-2874P4MEDIUMCVSS 4.3v12.1.32018-04-19
CVE-2018-2874 [MEDIUM] CVE-2018-2874: Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomp
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker. Succe
nvd
CVE-2014-4235P4LOWCVSS 3.5v11.5.10.2v12.0.6+3 more2014-07-17
CVE-2014-4235 [LOW] CVE-2014-4235: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2015-4765P4LOWCVSS 3.5v12.1.3v12.2.3+1 more2015-07-16
CVE-2015-4765 [LOW] CVE-2015-4765: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard.
nvd
CVE-2012-0078P4MEDIUMCVSS 4.0v12.1.2v12.1.32012-01-18
CVE-2012-0078 [MEDIUM] CVE-2012-0078: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).
nvd
CVE-2015-4741P4LOWCVSS 3.5v12.2.42015-07-16
CVE-2015-4741 [LOW] CVE-2015-4741: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup.
nvd
CVE-2015-2645P4LOWCVSS 3.5v10.2v11.5+4 more2015-07-16
CVE-2015-2645 [LOW] CVE-2015-2645: Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Bu
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2012-3148P4LOWCVSS 3.5v12.1.32012-10-16
CVE-2012-3148 [LOW] CVE-2012-3148: Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 al
Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload.
nvd
CVE-2010-0857P4LOWCVSS 3.5v11.5.10.22010-04-13
CVE-2010-0857 [LOW] CVE-2010-0857: Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5
Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2010-0858P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2010-04-13
CVE-2010-0858 [LOW] CVE-2010-0858: Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2011-3519P4LOWCVSS 3.5v12.1.2v12.1.32011-10-18
CVE-2011-3519 [LOW] CVE-2011-3519: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services.
nvd
CVE-2015-4926P4LOWCVSS 2.6v11.5.10.2v12.1+1 more2016-01-21
CVE-2015-4926 [LOW] CVE-2015-4926: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX.
nvd
CVE-2009-1984P4MEDIUMCVSS 4.4v11.5.10.2v12.0.6+1 more2009-07-14
CVE-2009-1984 [MEDIUM] CVE-2009-1984: Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2,
Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.
nvd
CVE-2008-2586P4MEDIUMCVSS 4.0v12.0.42008-07-15
CVE-2008-2586 [MEDIUM] CVE-2008-2586: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.
nvd
CVE-2008-5446P4LOWCVSS 3.5v11.52009-01-14
CVE-2008-5446 [LOW] CVE-2008-5446: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unres
nvd
CVE-2015-4739P4LOWCVSS 3.5v10.2v11.52015-07-16
CVE-2015-4739 [LOW] CVE-2015-4739: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Help screens.
nvd
CVE-2012-1727P4LOWCVSS 3.5v11.5.10.2v12.0.4+4 more2012-07-17
CVE-2012-1727 [LOW] CVE-2012-1727: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.
nvd
CVE-2012-1739P4LOWCVSS 3.5v11.5.10.2v12.0.4+4 more2012-07-17
CVE-2012-1739 [LOW] CVE-2012-1739: Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials Business Intelligence.
nvd
CVE-2011-2303P4LOWCVSS 3.5v11.5.10.2v12.0.6+2 more2011-10-18
CVE-2011-2303 [LOW] CVE-2011-2303: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.
nvd
CVE-2012-3164P4LOWCVSS 3.5v11.5.10.2v12.0.6+3 more2012-10-17
CVE-2012-3164 [LOW] CVE-2012-3164: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Publish Item.
nvd