Vulnerabilities fixed in Oracle E-Business Suite

🗓️ 18 Jan 2024 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 3 Views

Oracle fixes E-Business Suite vulnerabilities across components enabling XSS, DoS, data manipulation, and data access.

Reporter	Title	Published	Views	Family All 217
BDU FSTEC	The vulnerability of the DB Privileges component of the Oracle Application Object Library in the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, or delete data.	22 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the file loading component of the Oracle Web Applications Desktop Integrator software allows a attacker to compromise the confidentiality and integrity of the protected information.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Login component – SSO of the Oracle Application Object Library – allows a perpetrator to cause a service failure.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sub-component “Engineering Change Order” of the “Oracle Application Object Library” component in the Oracle E-Business Suite system, which allows a malicious actor to gain access to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Admin Console component of the Oracle CRM system, which manages customer relationships. The Oracle CRM Technical Foundation, a business automation system, and the Oracle E-Business Suite enable a perpetrator to cause service interruptions.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTML UI component of the Oracle Installed Base information storage center in the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sub-component “Engineering Change Order” of the “Oracle Application Object Library” component in the Oracle E-Business Suite system, which allows a malicious actor to gain access to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Setup sub-component, part of the Admin component in Oracle Knowledge Management, a system for automating business processes within the Oracle E-Business Suite, allows an attacker to gain access to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sub-component of the CRM User Management Framework in the Oracle Common Applications of the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the sub-component: Engineering Change Order for the Oracle Installed Base component of the Oracle E-Business Suite. This component allows an attacker to read, modify, add, or delete data.	24 Jan 202400:00	–	bdu_fstec

18 Jan 2024 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5

EPSS0.00471

SSVC

cross site scripting denial of service data manipulation sensitive data access oracle application library oracle customer history oracle installed base oracle istore oracle knowledge management one to one desktop integrator common applications oracle isupport