Oracle E-Business Suite和Oracle One-to-One Fulfillment 授权问题漏洞

Oracle E-Business Suite E-Business Suite and Oracle One-to-One Fulfillment are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financi...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28429)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

CVE-2019-2489

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: OCM Query. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2017-3433

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3424

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2016-5583

The CVE-2016-5583 entry concerns Oracle E-Business Suite, affecting the One-to-One Fulfillment component. Specifically, versions 12.1.1–12.1.3 and 12.2.3–12.2.6 are vulnerable in the File Upload subcomponent, where an unspecified flaw allows an unauthenticated remote attacker to impact integrity ...