Vulnerabilities fixed in Oracle E-Business Suite

🗓️ 18 Apr 2024 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 3 Views

Oracle fixed E-Business Suite vulnerabilities enabling cross-site scripting and arbitrary code in browsers.

Reporter	Title	Published	Views	Family All 454
BDU FSTEC	The vulnerability of the GL Accounts LOV component of the Oracle Trade Management software, a system for automating business operations within the Oracle E-Business Suite. This vulnerability allows an attacker to gain unauthorized access to protected information.	26 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Claim Line LOV component of the Oracle Trade Management software for managing trading operations in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information.	26 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Claim LOV component of the Oracle Trade Management software, a part of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected information.	26 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Offer LOV component of the Oracle Trade Management software, a business automation system within the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information.	26 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Campaign LOV component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, allows a malicious actor to gain unauthorized access to protected information.	30 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Campaign LOV component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, allows a malicious actor to gain unauthorized access to protected information.	30 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST Services component of the Oracle Applications Framework software platform, which is used in the Oracle E-Business Suite for automating business processes, allows a perpetrator to gain unauthorized access to protected information.	30 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Admin Screens and Grants UI components in the Oracle Workflow system, a task management system for enterprise automation in Oracle E-Business Suite, allows a perpetrator to execute arbitrary code.	2 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.	15 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.	15 May 202400:00	–	bdu_fstec

18 Apr 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.1 - 9.1

EPSS0.01619

SSVC

Oracle E-Business Suite Cross Site Scripting Oracle Workflow Oracle Marketing Oracle Production Scheduling Oracle Trade Management Oracle Applications Framework