Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 22 of 23
CVE-2026-60937P4LOWCVSS 3.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60937 [LOW] CWE-284 CVE-2026-60937: Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can
nvd
CVE-2009-1984P4MEDIUMCVSS 4.4v11.5.10.2v12.0.6+1 more2009-07-14
CVE-2009-1984 [MEDIUM] CVE-2009-1984: Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2,
Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.
nvd
CVE-2008-2586P4MEDIUMCVSS 4.0v12.0.42008-07-15
CVE-2008-2586 [MEDIUM] CVE-2008-2586: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2606.
nvd
CVE-2015-4739P4LOWCVSS 3.5v10.2v11.52015-07-16
CVE-2015-4739 [LOW] CVE-2015-4739: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Help screens.
nvd
CVE-2012-1727P4LOWCVSS 3.5v11.5.10.2v12.0.4+4 more2012-07-17
CVE-2012-1727 [LOW] CVE-2012-1727: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Document Repository.
nvd
CVE-2012-1739P4LOWCVSS 3.5v11.5.10.2v12.0.4+4 more2012-07-17
CVE-2012-1739 [LOW] CVE-2012-1739: Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Financials Business Intelligence.
nvd
CVE-2011-2303P4LOWCVSS 3.5v11.5.10.2v12.0.6+2 more2011-10-18
CVE-2011-2303 [LOW] CVE-2011-2303: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.
nvd
CVE-2012-3164P4LOWCVSS 3.5v11.5.10.2v12.0.6+3 more2012-10-17
CVE-2012-3164 [LOW] CVE-2012-3164: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Publish Item.
nvd
CVE-2014-6525P4LOWCVSS 3.5v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2014-6525 [LOW] CVE-2014-6525: Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Bu
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates.
nvd
CVE-2011-2271P4LOWCVSS 3.5v11.5.10.22012-01-18
CVE-2011-2271 [LOW] CVE-2011-2271: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload.
nvd
CVE-2026-60936P4LOWCVSS 3.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60936 [LOW] CWE-400 CVE-2026-60936: Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Intern
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can
nvd
CVE-2026-61048P4LOWCVSS 3.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61048 [LOW] CWE-400 CVE-2026-61048: Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: Us
Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Inventory Optimization. Successful attacks of this vulnerability c
nvd
CVE-2012-0513P4LOWCVSS 2.6v12.0.6v12.1.32012-05-03
CVE-2012-0513 [LOW] CVE-2012-0513: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity, related to REST Services.
nvd
CVE-2007-0291P4MEDIUMCVSS 4.0v6.2.32007-01-17
CVE-2007-0291 [MEDIUM] CVE-2007-0291: Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and a
Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02.
nvd
CVE-2010-0909P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0909 [LOW] CVE-2010-0909: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2010-2404P4LOWCVSS 3.5v11.5.10.2v12.0.6+1 more2010-10-14
CVE-2010-2404 [LOW] CVE-2010-2404: Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2,
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors related to Account.
nvd
CVE-2009-1986P4LOWCVSS 2.6v11.5.10.22009-07-14
CVE-2009-1986 [LOW] CVE-2009-1986: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2012-0542P4LOWCVSS 2.6v11.5.10.2v12.0.4+4 more2012-05-03
CVE-2012-0542 [LOW] CVE-2012-0542: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Runtime Catalog.
nvd
CVE-2010-0836P4LOWCVSS 2.6v11.5.10.2v12.0.6+1 more2010-07-13
CVE-2010-0836 [LOW] CVE-2010-0836: Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 11
Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
nvd
CVE-2009-3402P4LOWCVSS 2.1v11.5.10.2v12.0.6+1 more2009-10-22
CVE-2009-3402 [LOW] CVE-2009-3402: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd