Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 17 of 23
CVE-2012-3222P4MEDIUMCVSS 5.0v11.5.10.2v12.0.6+3 more2012-10-17
CVE-2012-3222 [MEDIUM] CVE-2012-3222: Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2,
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Signon.
nvd
CVE-2013-2388P4MEDIUMCVSS 5.0v11.5.10.2v12.0.6+1 more2013-04-17
CVE-2013-2388 [MEDIUM] CVE-2013-2388: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Mid Tier File Management.
nvd
CVE-2010-0869P4MEDIUMCVSS 4.3v5.5.05.07v5.5.06.00+1 more2010-04-13
CVE-2010-0869 [MEDIUM] CVE-2010-0869: Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Sui
Unspecified vulnerability in the Oracle Transportation Management component in Oracle E-Business Suite 5.5.05.07, 5.5.06.00, and 6.0.03 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2014-4281P4MEDIUMCVSS 4.3v12.0.6v12.1.3+3 more2014-10-15
CVE-2014-4281 [MEDIUM] CVE-2014-4281: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Portal Integration.
nvd
CVE-2014-4285P4MEDIUMCVSS 4.3v11.5.10.22014-10-15
CVE-2014-4285 [MEDIUM] CVE-2014-4285: Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Reports Configuration.
nvd
CVE-2024-21148P4MEDIUMCVSS 4.8≥ 12.2.3, ≤ 12.2.132024-07-16
CVE-2024-21148 [MEDIUM] CVE-2024-21148: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Pe
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction fr
nvd
CVE-2015-2610P4MEDIUMCVSS 4.3v12.0.6v12.1.3+2 more2015-07-16
CVE-2015-2610 [MEDIUM] CVE-2015-2610: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows.
nvd
CVE-2016-0519P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0519 [MEDIUM] CVE-2016-0519: Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2
Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0507.
nvd
CVE-2016-0507P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0507 [MEDIUM] CVE-2016-0507: Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2
Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AR Web Utilities, a different vulnerability than CVE-2016-0519.
nvd
CVE-2014-4213P4MEDIUMCVSS 4.3v12.0.6v12.1.3+2 more2014-07-17
CVE-2014-4213 [MEDIUM] CVE-2014-4213: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2014-6471P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2014-10-15
CVE-2014-6471 [MEDIUM] CVE-2014-6471: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OAM Diagnostics.
nvd
CVE-2008-2606P4MEDIUMCVSS 6.5v12.0.42008-07-15
CVE-2008-2606 [MEDIUM] CVE-2008-2606: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586.
nvd
CVE-2023-22004P4MEDIUMCVSS 4.3≥ 12.2.3, ≤ 12.2.122023-07-18
CVE-2023-22004 [MEDIUM] CVE-2023-22004: Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: R
Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Technology. Successful attacks require human intera
nvd
CVE-2026-62489P4MEDIUMCVSS 4.2≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62489 [MEDIUM] CWE-284 CVE-2026-62489: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerabi
nvd
CVE-2007-0290P4MEDIUMCVSS 5.5v11.5.10.22007-01-17
CVE-2007-0290 [MEDIUM] CVE-2007-0290: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unk
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) Application Object Library (APPS01), (2) Human Resources (APPS03), (3) Payables (APPS04), (4) Trading Community Architecture (APPS05), and (5) Web Applications Desktop Integrator (APPS06).
nvd
CVE-2008-5458P4MEDIUMCVSS 5.5v11.52009-01-14
CVE-2008-5458 [MEDIUM] CVE-2008-5458: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2008-3985P4MEDIUMCVSS 5.0v12.0.42008-10-14
CVE-2008-3985 [MEDIUM] CVE-2008-3985: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2011-2302P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+2 more2011-10-18
CVE-2011-2302 [MEDIUM] CVE-2011-2302: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Single Sign On.
nvd
CVE-2014-6556P4MEDIUMCVSS 4.6v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2014-6556 [MEDIUM] CVE-2014-6556: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AD_DDL.
nvd
CVE-2016-0513P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0513 [MEDIUM] CVE-2016-0513: Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to BIS Common Components.
nvd