Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 18 of 23
CVE-2016-0575P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0575 [MEDIUM] CVE-2016-0575: Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.
Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service.
nvd
CVE-2014-6539P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2014-10-15
CVE-2014-6539 [MEDIUM] CVE-2014-6539: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6472.
nvd
CVE-2008-2601P4MEDIUMCVSS 5.5v12.0.42008-07-15
CVE-2008-2601 [MEDIUM] CVE-2008-2601: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unkno
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
nvd
CVE-2002-1666P4MEDIUMCVSS 5.0v11.1v11.2+4 more2002-12-31
CVE-2002-1666 [MEDIUM] CVE-2002-1666: Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to exec
Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.
nvd
CVE-2008-3988P4MEDIUMCVSS 5.0v10.2v11.5+1 more2008-10-14
CVE-2008-3988 [MEDIUM] CVE-2008-3988: Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and
Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2008-3998P4MEDIUMCVSS 4.9v12.0.42008-10-14
CVE-2008-3998 [MEDIUM] CVE-2008-3998: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows re
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2009-3397P4MEDIUMCVSS 4.3v12.0.6v12.1.12009-10-22
CVE-2009-3397 [MEDIUM] CVE-2009-3397: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2010-0871P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-04-13
CVE-2010-0871 [MEDIUM] CVE-2010-0871: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-3513P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+2 more2011-10-18
CVE-2011-3513 [MEDIUM] CVE-2011-3513: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
nvd
CVE-2010-2418P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-2418 [MEDIUM] CVE-2010-2418: Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Territory Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-3504P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-3504 [MEDIUM] CVE-2010-3504: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-2416P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-2416 [MEDIUM] CVE-2010-2416: Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2016-0509P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0509 [MEDIUM] CVE-2016-0509: Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.
Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to AP Web Utilities.
nvd
CVE-2016-0521P4MEDIUMCVSS 4.3v11.5.10.22016-01-21
CVE-2016-0521 [MEDIUM] CVE-2016-0521: Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to Redirection.
nvd
CVE-2004-1369P4MEDIUMCVSS 5.0v11.5.1v11.5.2+7 more2004-08-04
CVE-2004-1369 [MEDIUM] CVE-2004-1369: The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash)
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
nvd
CVE-2013-3788P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-07-17
CVE-2013-3788 [MEDIUM] CVE-2013-3788: Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Supplier Management.
nvd
CVE-2013-3778P4MEDIUMCVSS 4.3v12.0.6v12.1.32013-07-17
CVE-2013-3778 [MEDIUM] CVE-2013-3778: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help.
nvd
CVE-2014-6550P4MEDIUMCVSS 4.3v11.5.10.22014-10-15
CVE-2014-6550 [MEDIUM] CVE-2014-6550: Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business S
Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp.
nvd
CVE-2014-6561P4MEDIUMCVSS 4.3v12.0.4v12.0.6+6 more2014-10-15
CVE-2014-6561 [MEDIUM] CVE-2014-6561: Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6
Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice.
nvd
CVE-2015-0404P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2015-0404 [MEDIUM] CVE-2015-0404: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.
nvd