Oracle Marketing vulnerabilities

74 known vulnerabilities affecting oracle/marketing.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL6HIGH57MEDIUM11

Vulnerabilities

Page 1 of 4

CVE-2025-62481CRITICALCVSS 9.8≥ 12.2.3, ≤ 12.2.142025-10-21

CVE-2025-62481 [CRITICAL] CWE-306 CVE-2025-62481: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in

nvd

CVE-2025-53072CRITICALCVSS 9.8≥ 12.2.3, ≤ 12.2.142025-10-21

CVE-2025-53072 [CRITICAL] CWE-306 CVE-2025-53072: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in

nvd

CVE-2024-21169MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.132024-07-16

CVE-2024-21169 [MEDIUM] CWE-284 CVE-2024-21169: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Sup Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized upda

nvd

CVE-2024-21078HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21078 [HIGH] CVE-2024-21078: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to c

nvd

CVE-2024-21079HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21079 [HIGH] CVE-2024-21079: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Campaign LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized access to c

nvd

CVE-2023-21851HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.122023-01-18

CVE-2023-21851 [HIGH] CWE-284 CVE-2023-21851: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in una

nvd

CVE-2021-2355CRITICALCVSS 9.1≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-07-21

CVE-2021-2355 [CRITICAL] CVE-2021-2355: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can r

nvd

CVE-2021-2359HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-07-21

CVE-2021-2359 [HIGH] CVE-2021-2359: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from

nvd

CVE-2021-2205CRITICALCVSS 9.1≥ 12.2.7, ≤ 12.2.102021-04-22

CVE-2021-2205 [CRITICAL] CVE-2021-2205: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.7-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthori

nvd

CVE-2021-2026HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2026 [HIGH] CVE-2021-2026: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from

nvd

CVE-2021-2027HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2027 [HIGH] CVE-2021-2027: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from

nvd

CVE-2021-2118HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2118 [HIGH] CVE-2021-2118: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from

nvd

CVE-2020-14875CRITICALCVSS 9.1≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14875 [CRITICAL] CVE-2020-14875: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability

nvd

CVE-2020-14817HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14817 [HIGH] CVE-2020-14817: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction

nvd

CVE-2020-14835HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-10-21

CVE-2020-14835 [HIGH] CVE-2020-14835: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other

nvd

CVE-2020-14816HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14816 [HIGH] CVE-2020-14816: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction

nvd

CVE-2020-14831HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14831 [HIGH] CVE-2020-14831: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction

nvd

CVE-2020-14849HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102020-10-21

CVE-2020-14849 [HIGH] CVE-2020-14849: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction

nvd

CVE-2020-14658CRITICALCVSS 9.1≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-07-15

CVE-2020-14658 [CRITICAL] CVE-2020-14658: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can

nvd

CVE-2020-14555MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-07-15

CVE-2020-14555 [MEDIUM] CVE-2020-14555: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Admin Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction fr

nvd

1 / 4Next →