CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

CVE-2021-2161

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

CVE-2021-2162

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...

CVE-2021-2151

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2021-2932

Name of the Vulnerable Software and Affected Versions Oracle Subledger Accounting versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Inquiries component of Oracle Subledger Accounting in Oracle E-Business Suite. It allows a remote attacker to gain...

PT-2021-2758

Name of the Vulnerable Software and Affected Versions: Oracle CRM Technical Foundation versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of the Data Source component of Oracle CRM Technical Foundation, allowing a remote attacker to gain unauthorize...

PT-2021-2761

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of the Document Management component. It allows a low-privileged attacker...

PT-2021-2836

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 Description: The issue is related to insufficient access control in the Price Book component of Oracle Advanced Pricing. It allows a remote attacker to modify, add, or delete data and gain unauthorized...

PT-2021-2841

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Asset Management versions 12.1.1 through 12.1.3 Oracle Enterprise Asset Management versions 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of the Setup component of Oracle Enterprise Asset...

PT-2021-2845

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the Loan Details and Loan Accounting Events components of the Oracle Loans product in Oracle E-Business Suite. This can be...

PT-2021-2937

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to the Hold Management component of Oracle Project Contracts in Oracle E-Business Suite. It allows a low-privileged attacker with network access via HTTP t...

CVE-2021-2281: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2264: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

PT-2021-14608

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Customers Online, resulting in unauthorized creation, deletion, or...

PT-2021-2942

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 through 12.0.3 Description The issue exists due to insufficient input validation in the Pre Login component of Oracle FLEXCUBE Direct Banking. This allows a remote attacker to modify data or gain...

PT-2021-2839

Name of the Vulnerable Software and Affected Versions: Oracle Cash Management versions 12.1.1 through 12.1.3 Description: The issue is related to insufficient access control in the Bank Account Transfer component of Oracle Cash Management in Oracle E-Business Suite. This can allow a remote attack...

CVE-2021-2267: Undefined Security Weakness

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution...

CVE-2021-2253: Undefined Security Weakness

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain component: Core. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Cha...

PT-2021-2948

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is caused by insufficient input validation in the Web Listener component of Oracle HTTP Server. This allows a remote attacker to gain read access to data or...

PT-2021-15261

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue affects the Oracle Engineering product, allowing a low-privileged attacker with network access via HTTP to...