Oracle Installed Base vulnerabilities
21 known vulnerabilities affecting oracle/installed_base.
Total CVEs
21
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH8MEDIUM13
Vulnerabilities
Page 1 of 2
CVE-2026-60738P3HIGHCVSS 8.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60738 [HIGH] CWE-284 CVE-2026-60738: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result i
nvd
CVE-2026-60904P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60904 [HIGH] CWE-284 CVE-2026-60904: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result i
nvd
CVE-2026-62472P3HIGHCVSS 8.1≥ 12.2.4, ≤ 12.2.152026-07-21
CVE-2026-62472 [HIGH] CWE-284 CVE-2026-62472: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result i
nvd
CVE-2026-62473P3HIGHCVSS 8.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62473 [HIGH] CWE-200 CVE-2026-62473: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result i
nvd
CVE-2021-2231P3HIGHCVSS 8.1v12.1.32021-04-22
CVE-2021-2231 [HIGH] CVE-2021-2231: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion
nvd
CVE-2017-3361P3HIGHCVSS 8.2v12.1.1v12.1.2+1 more2017-01-27
CVE-2017-3361 [HIGH] CVE-2017-3361: Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User
Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a p
nvd
CVE-2022-21251P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.112022-01-19
CVE-2022-21251 [HIGH] CVE-2022-21251: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance M
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-60908P3HIGHCVSS 7.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60908 [HIGH] CWE-284 CVE-2026-60908: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result i
nvd
CVE-2026-70775P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70775 [MEDIUM] CWE-284 CVE-2026-70775: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Inter
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in un
nvd
CVE-2024-21258P4MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.142024-10-15
CVE-2024-21258 [MEDIUM] CWE-922 CVE-2024-21258: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Inter
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in u
nvd
CVE-2024-20941P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20941 [MEDIUM] CWE-125 CVE-2024-20941: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI).
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other
nvd
CVE-2024-20935P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20935 [MEDIUM] CVE-2024-20935: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a pe
nvd
CVE-2024-21072P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-04-16
CVE-2024-21072 [MEDIUM] CVE-2024-21072: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provi
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person oth
nvd
CVE-2026-60907P4MEDIUMCVSS 5.0≥ 12.2.4, ≤ 12.2.152026-07-21
CVE-2026-60907 [MEDIUM] CWE-284 CVE-2026-60907: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Ite
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.4-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can resu
nvd
CVE-2024-20933P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20933 [MEDIUM] CWE-352 CVE-2024-20933: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction f
nvd
CVE-2024-20934P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-01-16
CVE-2024-20934 [MEDIUM] CWE-352 CVE-2024-20934: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction f
nvd
CVE-2024-20958P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20958 [MEDIUM] CVE-2024-20958: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a per
nvd
CVE-2016-3534P4MEDIUMCVSS 4.7v12.1.1v12.1.2+4 more2016-07-21
CVE-2016-3534 [MEDIUM] CVE-2016-3534: Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1,
Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU. Oracle has not commented on third-party claims that this issue invol
nvd
CVE-2021-2023P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92021-01-20
CVE-2021-2023 [MEDIUM] CVE-2021-2023: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Sup
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person
nvd
CVE-2020-14822P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21
CVE-2020-14822 [MEDIUM] CVE-2020-14822: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Sup
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a
nvd
1 / 2Next →