Lucene search
+L

437 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•6 views

CVE-2021-2380: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS5.7AI score0.0069EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-7158

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing a low-privileged attacke...

7.9CVSS0.0069EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•14 views

The vulnerability of the Home Page component of the Oracle Applications Framework allows a perpetrator to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Home Page component of the Oracle Applications Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data, or to gain full control over the applicati...

9.4CVSS6.8AI score0.01191EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/04/23 12:00 a.m.•112 views

Oracle E-Business Suite Multiple Vulnerabilities (April 2021 CPU)

The version of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version th...

9.1CVSS6.5AI score0.92907EPSS
SaveExploits8References74
OSV
OSV
•added 2021/04/22 10:15 p.m.•13 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS6.6AI score0.01191EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/22 10:15 p.m.•8 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS6.8AI score0.01191EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/04/22 9:53 p.m.•17 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS7.1AI score0.01191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/22 9:53 p.m.•35 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS8.7AI score0.01191EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/22 9:53 p.m.•94 views

CVE-2021-2200

CVE-2021-2200 affects Oracle E-Business Suite, specifically the Oracle Applications Framework Home page in version 12.2.10. The vulnerability is described as easily exploitable via unauthenticated HTTP access, enabling an attacker to compromise the Oracle Applications Framework and potentially pe...

9.1CVSS8.5AI score0.01191EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/22 12:00 a.m.•3 views

CVE-2021-2200: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS5.8AI score0.01191EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/21 12:00 a.m.•17 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39954)

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...

9.1CVSS6.3AI score0.01191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•0 views

PT-2021-2876

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.10 Description The issue is related to insufficient input validation in the Home page component of the Oracle Applications Framework. This allows an unauthenticated attacker with network access via HTTP to...

9.4CVSS0.01191EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•12 views

Oracle Applications Framework 安全漏洞

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...

9.1CVSS5.6AI score0.01191EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/11/05 12:00 a.m.•14 views

The vulnerability of the Page Request component in the Oracle Applications Framework software platform of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Page Request component in the Oracle Applications Framework software platform of the Oracle E-Business Suite relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data using the HTTP...

5CVSS6.5AI score0.01168EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/10/22 12:00 a.m.•14 views

Oracle Applications Framework Code Execution Vulnerability

Oracle Applications Framework is the United States Oracle Oracle company's a MVC-based Web development framework. A security vulnerability exists in Oracle Applications Framework product versions 12.1.3, 12.2.3 through 12.2.10, which can be exploited by an attacker accessing Oracle Applications...

5.8CVSS8.9AI score0.01168EPSS
SaveExploits0References1
OSV
OSV
•added 2020/10/21 3:15 p.m.•17 views

CVE-2020-14746

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popup windows. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

4.7CVSS5.8AI score0.01168EPSS
SaveExploits0References1
NVD
NVD
•added 2020/10/21 3:15 p.m.•31 views

CVE-2020-14746

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popup windows. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.8CVSS0.01168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/10/21 2:04 p.m.•13 views

CVE-2020-14746

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popup windows. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

4.7CVSS5.7AI score0.01168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/21 2:04 p.m.•28 views

CVE-2020-14746

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popup windows. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

4.7CVSS4.5AI score0.01168EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/21 2:04 p.m.•76 views

CVE-2020-14746

CVE-2020-14746 affects Oracle E-Business Suite, Oracle Applications Framework (Popup windows). Vulnerable versions: 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access over HTTP can exploit this, with user interaction required, to potentially perform unauthorized updates, i...

5.8CVSS4.4AI score0.01168EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder