Oracle E-Business Suite vulnerabilities
458 known vulnerabilities affecting oracle/e-business_suite.
Total CVEs
458
CISA KEV
2
actively exploited
Public exploits
6
Exploited in wild
5
Severity breakdown
CRITICAL56HIGH126MEDIUM227LOW49
Vulnerabilities
Page 7 of 23
CVE-2026-60687P3MEDIUMCVSS 6.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60687 [MEDIUM] CWE-200 CVE-2026-60687: Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: I
Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle U.S. Federal Financials. While the vulnerability is in
nvd
CVE-2026-83433P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83433 [MEDIUM] CWE-284 CVE-2026-83433: Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can resul
nvd
CVE-2026-83443P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-09-15
CVE-2026-83443 [MEDIUM] CWE-200 CVE-2026-83443: Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operation
Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-60812P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60812 [MEDIUM] CWE-200 CVE-2026-60812: Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (compo
Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Supply Chain Trading Connector. Successful attacks
nvd
CVE-2026-62488P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62488 [MEDIUM] CWE-284 CVE-2026-62488: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks of this vulnerabili
nvd
CVE-2026-60843P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60843 [MEDIUM] CWE-284 CVE-2026-60843: Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component
Vulnerability in the Oracle Citizen Interaction Center product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Citizen Interaction Center. Successful attacks of this
nvd
CVE-2026-61262P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61262 [MEDIUM] CWE-284 CVE-2026-61262: Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagn
Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Supported versions that are affected are 12.2.3-12.215. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Teleservice. Successful attacks of this vulnerability can resul
nvd
CVE-2006-0289P3CRITICALCVSS 10.0v11.5.102006-01-18
CVE-2006-0289 [CRITICAL] CVE-2006-0289: Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suit
Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005
nvd
CVE-2006-3716P3CRITICALCVSS 10.0v11.5.10.22006-07-21
CVE-2006-3716 [CRITICAL] CVE-2006-3716: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unk
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS01 for Internet Expenses; (2) APPS02, (3) APPS05, (4) APPS06, (5) APPS07, (6) APPS08, (7) APPS09, and (8) APPS10 for Oracle Application Object Library; (9) APPS11, (10) APPS12, and (11) APPS13 for Oracl
nvd
CVE-2026-61279P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61279 [MEDIUM] CWE-200 CVE-2026-61279: Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Su
Vulnerability in the Oracle Proposals product of Oracle E-Business Suite (component: Proposals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. Successful attacks of this vulnerability can result in unauthorized updat
nvd
CVE-2026-61266P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61266 [MEDIUM] CWE-89 CVE-2026-61266: Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component
Vulnerability in the Oracle Supply Chain Globalization product of Oracle E-Business Suite (component: Copy Inventory Organization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Supply Chain Globalization. Successful attacks of
nvd
CVE-2026-60573P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60573 [MEDIUM] CWE-284 CVE-2026-60573: Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partne
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Partner Dashboard). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Partner Management. Successful attacks of this vulnerability can
nvd
CVE-2026-62443P3HIGHCVSS 7.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62443 [HIGH] CWE-352 CVE-2026-62443: Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int
Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Contracts Integration. Successful attacks require human intera
nvd
CVE-2005-3455P3CRITICALCVSS 10.0v11.5.1v11.5.2+8 more2005-11-02
CVE-2005-3455 [CRITICAL] CVE-2005-3455: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in Application Install; (2) APPS02 and (3) APPS03 in Application Object Library; (4) APPS05 and (5) APPS06 in Applications Technology Stack; (6) APPS07 in Applications Utilities;
nvd
CVE-2006-5370P3CRITICALCVSS 10.0v11.5.10.22006-10-18
CVE-2006-5370 [CRITICAL] CVE-2006-5370: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and r
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore.
nvd
CVE-2026-60846P3MEDIUMCVSS 6.7≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60846 [MEDIUM] CWE-284 CVE-2026-60846: Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component:
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks of this vu
nvd
CVE-2023-22093P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.122023-10-17
CVE-2023-22093 [MEDIUM] CVE-2023-22093: Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unaut
nvd
CVE-2026-60587P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60587 [MEDIUM] CWE-284 CVE-2026-60587: Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Projec
Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Project Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Foundation. Successful attacks of this vulnerability can
nvd
CVE-2026-60572P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60572 [MEDIUM] CWE-284 CVE-2026-60572: Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Sui
Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Web Service Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway. S
nvd
CVE-2026-60688P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60688 [MEDIUM] CWE-284 CVE-2026-60688: Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). Sup
Vulnerability in the Oracle Scheduler product of Oracle E-Business Suite (component: Rules UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Scheduler. Successful attacks of this vulnerability can result in unauthorized update
nvd