Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 21 of 23
CVE-2015-0415P4MEDIUMCVSS 4.0v12.1.32015-01-21
CVE-2015-0415 [MEDIUM] CVE-2015-0415: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.
nvd
CVE-2014-0366P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+2 more2014-01-15
CVE-2014-0366 [MEDIUM] CVE-2014-0366: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Attachments.
nvd
CVE-2016-0459P4MEDIUMCVSS 4.0v11.5.10.2v12.1.3+3 more2016-01-21
CVE-2016-0459 [MEDIUM] CVE-2016-0459: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.
nvd
CVE-2010-3589P4MEDIUMCVSS 4.0v11.5.10.2v12.0.4+5 more2011-01-19
CVE-2010-3589 [MEDIUM] CVE-2010-3589: Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications
Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.
nvd
CVE-2014-6523P4MEDIUMCVSS 4.0v12.1.3v12.2.2+2 more2014-10-15
CVE-2014-6523 [MEDIUM] CVE-2014-6523: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface.
nvd
CVE-2014-6479P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+1 more2014-10-15
CVE-2014-6479 [MEDIUM] CVE-2014-6479: Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Technology component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via vectors related to OC4J Configuration.
nvd
CVE-2013-3747P4MEDIUMCVSS 4.0v11.5.10.2v12.0.6+1 more2013-07-17
CVE-2013-3747 [MEDIUM] CVE-2013-3747: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Client System Analyzer.
nvd
CVE-2014-4235P4LOWCVSS 3.5v11.5.10.2v12.0.6+3 more2014-07-17
CVE-2014-4235 [LOW] CVE-2014-4235: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2015-4765P4LOWCVSS 3.5v12.1.3v12.2.3+1 more2015-07-16
CVE-2015-4765 [LOW] CVE-2015-4765: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard.
nvd
CVE-2018-2874P4MEDIUMCVSS 4.3v12.1.32018-04-19
CVE-2018-2874 [MEDIUM] CVE-2018-2874: Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomp
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library. Successful attacks require human interaction from a person other than the attacker. Succe
nvd
CVE-2012-0078P4MEDIUMCVSS 4.0v12.1.2v12.1.32012-01-18
CVE-2012-0078 [MEDIUM] CVE-2012-0078: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).
nvd
CVE-2010-0858P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2010-04-13
CVE-2010-0858 [LOW] CVE-2010-0858: Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2015-4741P4LOWCVSS 3.5v12.2.42015-07-16
CVE-2015-4741 [LOW] CVE-2015-4741: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup.
nvd
CVE-2015-2645P4LOWCVSS 3.5v10.2v11.5+4 more2015-07-16
CVE-2015-2645 [LOW] CVE-2015-2645: Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Bu
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2012-3148P4LOWCVSS 3.5v12.1.32012-10-16
CVE-2012-3148 [LOW] CVE-2012-3148: Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 al
Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload.
nvd
CVE-2015-4926P4LOWCVSS 2.6v11.5.10.2v12.1+1 more2016-01-21
CVE-2015-4926 [LOW] CVE-2015-4926: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX.
nvd
CVE-2010-0857P4LOWCVSS 3.5v11.5.10.22010-04-13
CVE-2010-0857 [LOW] CVE-2010-0857: Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5
Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2008-5446P4LOWCVSS 3.5v11.52009-01-14
CVE-2008-5446 [LOW] CVE-2008-5446: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unres
nvd
CVE-2011-3519P4LOWCVSS 3.5v12.1.2v12.1.32011-10-18
CVE-2011-3519 [LOW] CVE-2011-3519: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services.
nvd
CVE-2015-0504P4LOWCVSS 2.6v12.0.6v12.1.32015-04-16
CVE-2015-0504 [LOW] CVE-2015-0504: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Error Messages.
nvd