Oracle Isupport vulnerabilities
29 known vulnerabilities affecting oracle/isupport.
Total CVEs
29
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH21MEDIUM8
Vulnerabilities
Page 2 of 2
CVE-2020-2878P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15
CVE-2020-2878 [HIGH] CVE-2020-2878: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). Supported
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and whil
nvd
CVE-2026-60826P3MEDIUMCVSS 6.6≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60826 [MEDIUM] CWE-284 CVE-2026-60826: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeov
nvd
CVE-2026-60825P3MEDIUMCVSS 6.6≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60825 [MEDIUM] CWE-284 CVE-2026-60825: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeov
nvd
CVE-2026-61257P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61257 [MEDIUM] CWE-284 CVE-2026-61257: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). Su
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Call Back). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in unauthorized update,
nvd
CVE-2024-20944P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.132024-01-16
CVE-2024-20944 [MEDIUM] CWE-352 CVE-2024-20944: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operati
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other
nvd
CVE-2020-2789P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.82020-04-15
CVE-2020-2789 [MEDIUM] CVE-2020-2789: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface).
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person ot
nvd
CVE-2017-10175P4MEDIUMCVSS 4.3v12.1.1v12.1.2+5 more2017-08-08
CVE-2017-10175 [MEDIUM] CVE-2017-10175: Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles).
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerabi
nvd
CVE-2020-2667P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-01-15
CVE-2020-2667 [MEDIUM] CVE-2020-2667: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Support
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport. Successful attacks require human interaction from a person other tha
nvd
CVE-2020-2668P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-01-15
CVE-2020-2668 [MEDIUM] CVE-2020-2668: Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Support
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport. Successful attacks require human interaction from a person other tha
nvd
← Previous2 / 2