Oracle Corporation Installed Base vulnerabilities
14 known vulnerabilities affecting oracle_corporation/installed_base.
Total CVEs
14
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM10
Vulnerabilities
Page 1 of 1
CVE-2021-2231P3HIGHCVSS 8.1v12.1.32021-04-22
CVE-2021-2231 [HIGH] CVE-2021-2231: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion
nvd
CVE-2026-101849P3HIGHCVSS 7.6≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-101849 [HIGH] CVE-2026-101849: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Insta
Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attacks require human interaction from a person other than the
nvd
CVE-2022-21251P3HIGHCVSS 7.5v12.2.3-12.2.112022-01-19
CVE-2022-21251 [HIGH] CVE-2022-21251: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance M
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-101851P3HIGHCVSS 7.1≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-101851 [HIGH] CVE-2026-101851: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI)
Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base. Successful attacks of this vulnerability can result in unauthorized access to
nvd
CVE-2026-101850P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.152026-10-20
CVE-2026-101850 [MEDIUM] CVE-2026-101850: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Suppor
Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Installed Base. Successful attacks require human interaction from a person other than the attacker a
nvd
CVE-2024-20941P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20941 [MEDIUM] CWE-125 CVE-2024-20941: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI).
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other
nvd
CVE-2024-20935P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20935 [MEDIUM] CVE-2024-20935: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a pe
nvd
CVE-2024-21072P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-04-16
CVE-2024-21072 [MEDIUM] CVE-2024-21072: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provi
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person oth
nvd
CVE-2024-20933P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20933 [MEDIUM] CWE-352 CVE-2024-20933: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction f
nvd
CVE-2024-20934P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-01-16
CVE-2024-20934 [MEDIUM] CWE-352 CVE-2024-20934: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction f
nvd
CVE-2024-20958P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.132024-02-17
CVE-2024-20958 [MEDIUM] CVE-2024-20958: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a per
nvd
CVE-2021-2023P4MEDIUMCVSS 4.7v12.1.1-12.1.3v12.2.3-12.2.92021-01-20
CVE-2021-2023 [MEDIUM] CVE-2021-2023: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Sup
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person
nvd
CVE-2020-14822P4MEDIUMCVSS 4.7v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21
CVE-2020-14822 [MEDIUM] CVE-2020-14822: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Sup
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a
nvd
CVE-2019-3024P4MEDIUMCVSS 4.7v12.2.3-12.2.92019-10-16
CVE-2019-3024 [MEDIUM] CVE-2019-3024: Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineerin
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a perso
nvd