PT-2021-2763

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the DBI Setups component in Oracle E-Business Intelligence. It allows a low-privileged attacker with network access via HTTP to...

PT-2021-2914

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to errors in the code of a subcomponent of Oracle E-Business Suite, specifically in the Time and...

PT-2021-2936

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue is related to errors in the code of the Endeca component in Oracle Purchasing. It allows a remote attacker to gain unauthorized access to the device using HTTP requests. Successful...

CVE-2021-2269: Undefined Security Weakness

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Price Book. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Pricing. Successful...

CVE-2021-2254: Undefined Security Weakness

Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite component: Hold Management. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts...

CVE-2021-2255: Undefined Security Weakness

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Authoring. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts...

CVE-2021-2233: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Setup. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2156: Undefined Security Weakness

Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite component: Customer Tab. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers...

PT-2021-2819

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient access control in the Profiles component of the Oracle Application Object Library. It allows a remote attacker to modify, add...

PT-2021-2844

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of the Quotes subcomponent in Oracle Lease and Finance Management, part of...

PT-2021-2843

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the User Interface component of the Oracle Labor Distribution product. It allows a low-privileged attacker with network access v...

PT-2021-2820

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description: The issue is related to insufficient access control in the Attribute Admin Setup component of the Oracle Partner Management product. This can be exploited by a...

PT-2021-2847

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Process Operations versions 12.1.3 Description: The issue is related to errors in the code of the Process Operations component of Oracle MES for Process Manufacturing in Oracle E-Business Suite. This can be...

PT-2021-2918

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.1.2.4 Description The issue exists due to insufficient input validation in the Task Automation component of Oracle Hyperion Financial Management. This allows a remote attacker to read data, modif...

PT-2021-2922

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.1.3 Description The issue is related to a flaw in the APIs component of Oracle Installed Base, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can...

PT-2021-2837

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to inadequate access control in the Template Search component of the Oracle Bill Presentment...

PT-2021-2838

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to inadequate access control in the Bill Issues component of the Oracle Bills of Material product. It allows a low-privileged attacker with network acces...

PT-2021-2842

Name of the Vulnerable Software and Affected Versions: Oracle Financials Common Modules versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the Advanced Global Intercompany component. It can be exploited by a remote attacker using HTTP requests, allowing...

PT-2021-2840

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to inadequate access control in the Compensation Workbench component of Oracle E-Business Suite. It allows a low-privileged attacker with network access...

PT-2021-2913

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Intelligence and RFx subcomponents of the Oracle Sourcing product in Oracle E-Business Suite. It allows a low-privileged...