Vulnerabilities fixed in Oracle E-Business Suite

🗓️ 21 Oct 2020 00:00:00Reported by NCSCType

Oracle E-Business Suite vulnerabilities fixed; unauthenticated remote attacker may cause DoS, data manipulation, remote code execution, or access to sensitive data.

Reporter	Title	Published	Views	Family All 250
BDU FSTEC	The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, allows an attacker to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internal Operations component of the application’s access, organization, and interaction with various types of tasks in the Oracle Universal Work Queue system—a business automation tool within the Oracle E-Business Suite—allows a perpetrator to gain full control over the application.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Flex component of the Oracle CRM system, which manages customer relationships. The Oracle E-Business Suite technical foundation for automating business operations, allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the APIs of the Oracle Installed Base information storage center component in the Oracle E-Business Suite, which allows a perpetrator to access, modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Page Request component in the Oracle Applications Framework software platform of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Diagnostics component of the Oracle Application Object Library in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SQL Extensions component of the Oracle Applications Manager system’s application management tool allows a malicious individual to gain unauthorized access to protected information.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business operations allows attackers to gain unauthorized access to protected information or to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Oracle Applications Manager component, a tool for application management in the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information or to modify, add, or delete data.	5 Nov 202000:00	–	bdu_fstec

21 Oct 2020 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 210

CVSS 3.19.8

EPSS0.05089

SSVC