Oracle Corporation Trade Management vulnerabilities

31 known vulnerabilities affecting oracle_corporation/trade_management.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL2HIGH28MEDIUM1

Vulnerabilities

Page 1 of 2

CVE-2024-21146HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.132024-07-16

CVE-2024-21146 [HIGH] CWE-306 CVE-2024-21146: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accou Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in una

cvelistv5nvd

CVE-2024-21074HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21074 [HIGH] CWE-284 CVE-2024-21074: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Finance Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Finance LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in una

cvelistv5nvd

CVE-2024-21076HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21076 [HIGH] CWE-284 CVE-2024-21076: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Offer LO Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Offer LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unau

cvelistv5nvd

CVE-2024-21073HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21073 [HIGH] CWE-200 CVE-2024-21073: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LO Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unau

cvelistv5nvd

CVE-2024-21077HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21077 [HIGH] CWE-200 CVE-2024-21077: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accou Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result i

cvelistv5nvd

CVE-2024-21075HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21075 [HIGH] CVE-2024-21075: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim Li Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim Line LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unautho

cvelistv5nvd

CVE-2022-21250HIGHCVSS 8.1v12.2.3-12.2.112022-01-19

CVE-2022-21250 [HIGH] CVE-2022-21250: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accou Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorize

cvelistv5nvd

CVE-2021-2485HIGHCVSS 8.1v12.1.1-12.1.32021-10-20

CVE-2021-2485 [HIGH] CVE-2021-2485: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized creati

cvelistv5nvd

CVE-2021-35554MEDIUMCVSS 5.3v12.1.1-12.1.3v12.2.3-12.2.102021-10-20

CVE-2021-35554 [MEDIUM] CVE-2021-35554: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can resul

cvelistv5nvd

CVE-2021-2206HIGHCVSS 8.2v12.1.1-12.1.3v12.2.3-12.2.102021-04-22

CVE-2021-2206 [HIGH] CVE-2021-2206: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a pe

cvelistv5nvd

CVE-2021-2210HIGHCVSS 8.2v12.1.1-12.1.3v12.2.3-12.2.102021-04-22

CVE-2021-2210 [HIGH] CVE-2021-2210: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a pe

cvelistv5nvd

CVE-2020-14876CRITICALCVSS 9.1v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14876 [CRITICAL] CVE-2020-14876: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerabi

cvelistv5nvd

CVE-2020-14833HIGHCVSS 8.2v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14833 [HIGH] CVE-2020-14833: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interac

cvelistv5nvd

CVE-2020-14851HIGHCVSS 8.2v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14851 [HIGH] CVE-2020-14851: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interac

cvelistv5nvd

CVE-2020-14857HIGHCVSS 8.2v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14857 [HIGH] CVE-2020-14857: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interac

cvelistv5nvd

CVE-2020-14808HIGHCVSS 8.2v12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14808 [HIGH] CVE-2020-14808: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from

cvelistv5nvd

CVE-2020-14856HIGHCVSS 8.2v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14856 [HIGH] CVE-2020-14856: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interac

cvelistv5nvd

CVE-2020-14834HIGHCVSS 8.2v12.1.1 - 12.1.3v12.2.3 - 12.2.102020-10-21

CVE-2020-14834 [HIGH] CVE-2020-14834: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Int Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interac

cvelistv5nvd

CVE-2020-14665CRITICALCVSS 9.1v12.1.1-12.1.3v12.2.3-12.2.92020-07-15

CVE-2020-14665 [CRITICAL] CVE-2020-14665: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice) Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can res

cvelistv5nvd

CVE-2020-2821HIGHCVSS 8.2v12.1.1-12.1.3v12.2.3-12.2.82020-04-15

CVE-2020-2821 [HIGH] CVE-2020-2821: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Budget). Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Budget). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a per

cvelistv5nvd

1 / 2Next →