Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 23 of 23
CVE-2015-4865P4LOWCVSS 2.1v12.1.3v12.2.3+1 more2015-10-21
CVE-2015-4865 [LOW] CVE-2015-4865: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J.
nvd
CVE-2008-3993P4LOWCVSS 3.5v10.2v11.5+1 more2008-10-14
CVE-2008-3993 [LOW] CVE-2008-3993: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2026-60847P4LOWCVSS 3.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60847 [LOW] CWE-269 CVE-2026-60847: Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Oper
Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Order Entry executes to compromise Oracle Order Entry. Successful attacks of
nvd
CVE-2013-1517P4LOWCVSS 2.6v11.5.10.2v12.0.6+1 more2013-04-17
CVE-2013-1517 [LOW] CVE-2013-1517: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Diagnostics.
nvd
CVE-2015-2618P4LOWCVSS 2.1v10.2v11.5+4 more2015-07-16
CVE-2015-2618 [LOW] CVE-2015-2618: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Input validation.
nvd
CVE-2011-0797P4LOWCVSS 2.1v11.5.10.2v12.0.6+3 more2011-04-20
CVE-2011-0797 [LOW] CVE-2011-0797: Unspecified vulnerability in the Applications Install component in Oracle E-Business Suite 11.5.10.2
Unspecified vulnerability in the Applications Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2013-0390P4LOWCVSS 2.1v11.5.10.2v12.0.6+1 more2013-01-17
CVE-2013-0390 [LOW] CVE-2013-0390: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages.
nvd
CVE-2026-60804P4LOWCVSS 2.0≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60804 [LOW] CWE-284 CVE-2026-60804: Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: D
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks require human interactio
nvd
CVE-2026-61303P4LOWCVSS 1.9≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61303 [LOW] CWE-200 CVE-2026-61303: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Oper
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle EDI Gateway executes to compromise Oracle EDI Gateway. Successful attacks o
nvd
CVE-2026-61047P4LOWCVSS 1.9≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61047 [LOW] CWE-284 CVE-2026-61047: Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Production Scheduling executes to compromise Oracle Production Sc
nvd
CVE-2008-2619P4LOWCVSS 1.7v11.5.10.22008-10-14
CVE-2008-2619 [LOW] CVE-2008-2619: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2009-3401P4LOWCVSS 1.7v11.5.10.2v12.0.6+1 more2009-10-22
CVE-2009-3401 [LOW] CVE-2009-3401: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect confidentiality via unknown vectors.
nvd
CVE-2013-5874P4LOWCVSS 1.7v11.5.10.2v12.0.6+2 more2014-01-15
CVE-2013-5874 [LOW] CVE-2013-5874: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows local users to affect confidentiality via unknown vectors related to Logging.
nvd
CVE-2012-3162P4LOWCVSS 1.7v11.5.10.2v12.0.6+1 more2012-10-16
CVE-2012-3162 [LOW] CVE-2012-3162: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows local users to affect confidentiality, related to MDS loading.
nvd
CVE-2014-4248P4LOWCVSS 1.0v11.5.10.2v12.0.6+3 more2014-07-17
CVE-2014-4248 [LOW] CVE-2014-4248: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows local users to affect confidentiality via unknown vectors related to Logging.
nvd
CVE-2016-0454P4LOWCVSS 2.1v12.1v12.22016-01-21
CVE-2016-0454 [LOW] CVE-2016-0454: Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager.
nvd
CVE-2008-5450P4LOWCVSS 1.2v11.52009-01-14
CVE-2008-5450 [LOW] CVE-2008-5450: Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Busi
Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local users to affect confidentiality via unknown vectors.
nvd
CVE-2011-0796P4LOWCVSS 1.7v11.5.10.2v12.0.6+3 more2011-04-20
CVE-2011-0796 [LOW] CVE-2011-0796: Unspecified vulnerability in the Applications Install component in Oracle E-Business Suite 11.5.10.2
Unspecified vulnerability in the Applications Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows local users to affect confidentiality via unknown vectors.
nvd
← Previous23 / 23