Oracle E-Business Suite vulnerabilities

CVE-2026-83482 [HIGH] CWE-269 CVE-2026-83482: Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operat Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeove

CVE-2026-60340 [HIGH] CWE-269 CVE-2026-60340: Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterpris Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Project Costing. Successful attacks of this vulnerability can

CVE-2026-61035 [HIGH] CWE-284 CVE-2026-61035: Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (componen Vulnerability in the Oracle Financials for the Americas product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financials for the Americas. Successful attacks of this

CVE-2026-60755 [HIGH] CWE-284 CVE-2026-60755: Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operation Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attacks of this vulnerability can result in takeover of Or

CVE-2026-61314 [HIGH] CWE-284 CVE-2026-61314: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellan Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can resul

CVE-2019-2498 [HIGH] CVE-2019-2498: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: P Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Mana

CVE-2019-2470 [HIGH] CVE-2019-2470: Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: P Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Detail). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Manageme

CVE-2004-0543 [CRITICAL] CVE-2004-0543: Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5. Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.

CVE-2026-62515 [HIGH] CWE-269 CVE-2026-62515: Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (com Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Planning Command Center. While the vulnera

CVE-2026-60799 [HIGH] CWE-284 CVE-2026-60799: Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Co Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks of this vulnerab

CVE-2026-61299 [HIGH] CWE-284 CVE-2026-61299: Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (comp Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Logistics. Successful attacks o

CVE-2026-60800 [HIGH] CWE-284 CVE-2026-60800: Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Co Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks of this vulnerab

CVE-2019-2497 [HIGH] CVE-2019-2497: Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcompon Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Succes

CVE-2019-2400 [HIGH] CVE-2019-2400: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registra Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attack

CVE-2019-2440 [HIGH] CVE-2019-2440: Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Inter Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful att

CVE-2026-61090 [HIGH] CWE-269 CVE-2026-61090: Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscel Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Project Foundation executes to compromise Oracle Project Foundation. Success

CVE-2026-70837 [HIGH] CWE-284 CVE-2026-70837: Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (componen Vulnerability in the Oracle Financials for Asia/Pacific product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials for Asia/Pacific. Successful attacks of this v

CVE-2019-2551 [HIGH] CVE-2019-2551: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Ful

CVE-2026-60772 [HIGH] CWE-284 CVE-2026-60772: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. Successful attacks of this vulnera

CVE-2004-1371 [CRITICAL] CWE-119 CVE-2004-1371: Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code v Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.