Vulnerabilities fixed in Oracle E-Business Suite

🗓️ 28 Jan 2025 10:43:20Reported by NCSCType

Oracle E-Business Suite fixes vulnerabilities in Advanced Outbound Telephony, Project Foundation, Customer Care and Workflow exploitable by unauthenticated or low-privilege actors.

Reporter	Title	Published	Views	Family All 45
BDU FSTEC	The vulnerability of the Technology Foundation component of the Oracle Project Foundation software, a system for automating business operations in enterprises, allows a perpetrator to gain unauthorized access to the device.	6 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Service Requests component of the Oracle Customer Care software solution in the Oracle E-Business Suite, which allows a perpetrator to compromise the confidentiality and integrity of the protected information.	6 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Admin Screens and Grants UI components of the Oracle Workflow system allows a malicious individual to gain read access to data or to modify, add, or delete data.	10 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Region Mapping component of the Oracle Advanced Outbound Telephony application, which allows a perpetrator to compromise the confidentiality and integrity of the protected information	11 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-21489	21 Jan 202521:16	–	circl
Circl	CVE-2025-21506	21 Jan 202521:17	–	circl
Circl	CVE-2025-21516	21 Jan 202521:17	–	circl
Circl	CVE-2025-21541	21 Jan 202521:18	–	circl
CNNVD	Oracle E-Business Suite 安全漏洞	21 Jan 202500:00	–	cnnvd
CNNVD	Oracle E-Business Suite 安全漏洞	21 Jan 202500:00	–	cnnvd

Vulners

Node

oracle advanced_outbound_telephonyRange12.2.3–12.2.10

oracle customer_careRange12.2.5–12.2.13

oracle workflowRange12.2.3–12.2.14

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2025.html

28 Jan 2025 10:43Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.1

EPSS0.00284

SSVC