Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 20 of 23
CVE-2012-5058P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2012-10-17
CVE-2012-5058 [MEDIUM] CVE-2012-5058: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to the Web interface.
nvd
CVE-2012-3138P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2012-10-16
CVE-2012-3138 [MEDIUM] CVE-2012-3138: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface.
nvd
CVE-2013-1524P4MEDIUMCVSS 4.3v12.0.6v12.1.32013-04-17
CVE-2013-1524 [MEDIUM] CVE-2013-1524: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments.
nvd
CVE-2013-1528P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-04-17
CVE-2013-1528 [MEDIUM] CVE-2013-1528: Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6,
Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Payroll.
nvd
CVE-2013-0380P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2013-01-17
CVE-2013-0380 [MEDIUM] CVE-2013-0380: Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0
Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to View Payslip.
nvd
CVE-2010-2408P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-2408 [MEDIUM] CVE-2010-2408: Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2,
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2011-2246P4MEDIUMCVSS 4.3v11.5.10.2v12.0.4+4 more2011-07-20
CVE-2011-2246 [MEDIUM] CVE-2011-2246: Unspecified vulnerability in the Business Intelligence component in Oracle E-Business Suite 11.5.10.
Unspecified vulnerability in the Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Financials.
nvd
CVE-2010-0913P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0913 [MEDIUM] CVE-2010-0913: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-0912P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0912 [MEDIUM] CVE-2010-0912: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2010-0905P4MEDIUMCVSS 4.3v11.5.10.2v12.0.42010-07-13
CVE-2010-0905 [MEDIUM] CVE-2010-0905: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2015-4762P4MEDIUMCVSS 4.0v12.2.3v12.2.42015-10-21
CVE-2015-4762 [MEDIUM] CVE-2015-4762: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching.
nvd
CVE-2015-4743P4MEDIUMCVSS 4.0v12.2.32015-07-16
CVE-2015-4743 [MEDIUM] CVE-2015-4743: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities.
nvd
CVE-2015-4728P4MEDIUMCVSS 4.0v12.1.1v12.1.2+3 more2015-07-16
CVE-2015-4728 [MEDIUM] CVE-2015-4728: Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2
Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.
nvd
CVE-2012-3139P4MEDIUMCVSS 4.3v11.5.10.22012-10-16
CVE-2012-3139 [MEDIUM] CVE-2012-3139: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).
nvd
CVE-2015-4898P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+3 more2015-10-21
CVE-2015-4898 [MEDIUM] CVE-2015-4898: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.
nvd
CVE-2013-3749P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2013-07-17
CVE-2013-3749 [LOW] CVE-2013-3749: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is
nvd
CVE-2026-60938P4MEDIUMCVSS 4.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60938 [MEDIUM] CWE-269 CVE-2026-60938: Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor Distribution executes to compromise Oracle Labor Distributi
nvd
CVE-2007-0285P4MEDIUMCVSS 5.0v11.5.12007-01-17
CVE-2007-0285 [MEDIUM] CVE-2007-0285: Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaborat
Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and Applications 11.5.10CU2 has unknown impact and attack vectors related to Oracle Reports Developer, aka REP01.
nvd
CVE-2011-0791P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2011-04-20
CVE-2011-0791 [MEDIUM] CVE-2011-0791: Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.
Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export.
nvd
CVE-2009-3416P4MEDIUMCVSS 4.3v11.5.10.2v12.0.6+1 more2010-01-13
CVE-2009-3416 [MEDIUM] CVE-2009-3416: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect integrity via unknown vectors.
nvd