Oracle One-To-One Fulfillment vulnerabilities

47 known vulnerabilities affecting oracle/one-to-one_fulfillment.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL3HIGH37MEDIUM7

Vulnerabilities

Page 1 of 3

CVE-2024-20936MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-01-16

CVE-2024-20936 [MEDIUM] CWE-284 CVE-2024-20936: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Do Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction

nvd

CVE-2021-2155MEDIUMCVSS 4.3≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-04-22

CVE-2021-2155 [MEDIUM] CVE-2021-2155: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Do Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human inte

nvd

CVE-2021-2101CRITICALCVSS 9.1≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2101 [CRITICAL] CVE-2021-2101: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulne

nvd

CVE-2021-2100CRITICALCVSS 9.1≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2100 [CRITICAL] CVE-2021-2100: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulne

nvd

CVE-2021-2094HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20

CVE-2021-2094 [HIGH] CVE-2021-2094: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human int

nvd

CVE-2020-14863HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-10-21

CVE-2020-14863 [HIGH] CVE-2020-14863: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a

nvd

CVE-2020-14819HIGHCVSS 8.2v12.1.32020-10-21

CVE-2020-14819 [HIGH] CVE-2020-14819: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person

nvd

CVE-2020-2832HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2832 [HIGH] CVE-2020-2832: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a per

nvd

CVE-2020-2870HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-04-15

CVE-2020-2870 [HIGH] CVE-2020-2870: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human inte

nvd

CVE-2020-2824HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2824 [HIGH] CVE-2020-2824: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a per

nvd

CVE-2020-2826HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2826 [HIGH] CVE-2020-2826: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a per

nvd

CVE-2020-2827HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2827 [HIGH] CVE-2020-2827: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a per

nvd

CVE-2020-2825HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.32020-04-15

CVE-2020-2825 [HIGH] CVE-2020-2825: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a per

nvd

CVE-2020-2862MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-04-15

CVE-2020-2862 [MEDIUM] CVE-2020-2862: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Pr Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human in

nvd

CVE-2020-2597MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-01-15

CVE-2020-2597 [MEDIUM] CVE-2020-2597: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Ca Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle One-to-One Fulfillment. Successful attacks requi

nvd

CVE-2019-2672HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.82019-07-23

CVE-2019-2672 [HIGH] CVE-2019-2672: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require h

nvd

CVE-2019-2668HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.82019-07-23

CVE-2019-2668 [HIGH] CVE-2019-2668: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require h

nvd

CVE-2019-2666HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.82019-07-23

CVE-2019-2666 [HIGH] CVE-2019-2666: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require h

nvd

CVE-2019-2654HIGHCVSS 8.2v12.1.1v12.1.2+7 more2019-04-23

CVE-2019-2654 [HIGH] CVE-2019-2654: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Ful

nvd

CVE-2019-2653HIGHCVSS 8.2v12.1.1v12.1.2+7 more2019-04-23

CVE-2019-2653 [HIGH] CVE-2019-2653: Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponen Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Ful

nvd

1 / 3Next →