Oracle E-Business Suite vulnerabilities
327 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
327
CISA KEV
1
actively exploited
Public exploits
5
Exploited in wild
1
Severity breakdown
CRITICAL54HIGH47MEDIUM184LOW42
Vulnerabilities
Page 6 of 17
CVE-2015-2630MEDIUMCVSS 4.3v10.2v11.5+2 more2015-07-16
CVE-2015-2630 [MEDIUM] CVE-2015-2630: Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12
Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup.
nvd
CVE-2015-4728MEDIUMCVSS 4.0v12.1.1v12.1.2+3 more2015-07-16
CVE-2015-4728 [MEDIUM] CVE-2015-4728: Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2
Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.
nvd
CVE-2015-1926MEDIUMCVSS 5.5v12.2.3v12.2.42015-07-16
CVE-2015-1926 [MEDIUM] CVE-2015-1926: Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.
nvd
CVE-2015-4741LOWCVSS 3.5v12.2.42015-07-16
CVE-2015-4741 [LOW] CVE-2015-4741: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup.
nvd
CVE-2015-4765LOWCVSS 3.5v12.1.3v12.2.3+1 more2015-07-16
CVE-2015-4765 [LOW] CVE-2015-4765: Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard.
nvd
CVE-2015-2618LOWCVSS 2.1v10.2v11.5+4 more2015-07-16
CVE-2015-2618 [LOW] CVE-2015-2618: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Input validation.
nvd
CVE-2015-2645LOWCVSS 3.5v10.2v11.5+4 more2015-07-16
CVE-2015-2645 [LOW] CVE-2015-2645: Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Bu
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2015-4739LOWCVSS 3.5v10.2v11.52015-07-16
CVE-2015-4739 [LOW] CVE-2015-4739: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Help screens.
nvd
CVE-2015-0447MEDIUMCVSS 4.3v11.5.10.2v12.0.6+3 more2015-04-16
CVE-2015-0447 [MEDIUM] CVE-2015-0447: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Configurator DMZ rules.
nvd
CVE-2015-2565MEDIUMCVSS 4.3v11.5.10.2v12.0.4+4 more2015-04-16
CVE-2015-2565 [MEDIUM] CVE-2015-2565: Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 11.5.10.
Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Create Item Instance.
nvd
CVE-2015-0504LOWCVSS 2.6v12.0.6v12.1.32015-04-16
CVE-2015-0504 [LOW] CVE-2015-0504: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Error Messages.
nvd
CVE-2014-6556MEDIUMCVSS 4.6v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2014-6556 [MEDIUM] CVE-2014-6556: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to AD_DDL.
nvd
CVE-2014-6582MEDIUMCVSS 5.0v11.5.10.2v12.0.4+8 more2015-01-21
CVE-2014-6582 [MEDIUM] CVE-2014-6582: Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business S
Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Rapid Implementation.
nvd
CVE-2014-6572MEDIUMCVSS 6.4v12.0.4v12.0.5+7 more2015-01-21
CVE-2014-6572 [MEDIUM] CVE-2014-6572: Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to List of Values.
nvd
CVE-2015-0415MEDIUMCVSS 4.0v12.1.32015-01-21
CVE-2015-0415 [MEDIUM] CVE-2015-0415: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.
nvd
CVE-2015-0380MEDIUMCVSS 4.3v11.5.10.2v12.0.4+8 more2015-01-21
CVE-2015-0380 [MEDIUM] CVE-2015-0380: Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-
Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Summary.
nvd
CVE-2015-0393MEDIUMCVSS 6.0v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2015-0393 [MEDIUM] CVE-2015-0393: Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.1
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not co
nvd
CVE-2015-0404MEDIUMCVSS 4.3v11.5.10.2v12.0.6+4 more2015-01-21
CVE-2015-0404 [MEDIUM] CVE-2015-0404: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.
nvd
CVE-2014-6581MEDIUMCVSS 6.4v11.5.10.2v12.0.4+8 more2015-01-21
CVE-2014-6581 [MEDIUM] CVE-2014-6581: Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load Programs.
nvd
CVE-2014-6583MEDIUMCVSS 6.4v11.5.10.2v12.0.4+5 more2015-01-21
CVE-2014-6583 [MEDIUM] CVE-2014-6583: Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. allows remote attackers to affect confidentiality and integrity via unknown vectors related to Audience.
nvd