Lucene search
K

318 matches found

NVD
NVD
added 2021/04/22 10:15 p.m.15 views

CVE-2021-2314

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Profiles. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS0.00987EPSS
Exploits0References1
Prion
Prion
added 2021/04/22 10:15 p.m.18 views

Design/Logic Flaw

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Profiles. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.5CVSS8AI score0.00987EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/04/22 9:54 p.m.7 views

CVE-2021-2314

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Profiles. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS6.9AI score0.00987EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/04/22 9:54 p.m.14 views

CVE-2021-2314

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Profiles. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.1CVSS8.3AI score0.00987EPSS
Exploits0References1
CVE
CVE
added 2021/04/22 9:54 p.m.66 views

CVE-2021-2314

CVE-2021-2314 affects Oracle E-Business Suite — Oracle Application Object Library (Profiles) in versions 12.1.3 and 12.2.3–12.2.10. The issue, caused by a vulnerability in the Profiles component, permits a low-privileged, network-accessible attacker over HTTP to obtain unauthorized access to or m...

8.1CVSS8.1AI score0.00987EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.2 views

Oracle Application Object Library 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, etc., a collection of management software, is seamlessly integrated with a management suite. Object Library...

8.1CVSS5.7AI score0.00987EPSS
Exploits0References3
NVD
NVD
added 2021/03/26 8:15 a.m.13 views

CVE-2021-28249

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is ru...

8.8CVSS0.00415EPSS
Exploits1References1
NVD
NVD
added 2021/03/26 8:15 a.m.9 views

CVE-2021-28246

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be...

7.8CVSS0.00393EPSS
Exploits1References1
Prion
Prion
added 2021/03/26 8:15 a.m.13 views

Privilege escalation

UNSUPPORTED WHEN ASSIGNED CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The co...

4.4CVSS7.5AI score0.00393EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2021/03/26 8:15 a.m.9 views

Privilege escalation

UNSUPPORTED WHEN ASSIGNED CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the...

7.2CVSS8.5AI score0.00415EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/03/26 7:11 a.m.44 views

CVE-2021-28249

CA eHealth Performance Manager up to version 6.3.2.12 is affected by a Privilege Escalation due to a Dynamically Linked Shared Object Library. An attacker must place a malicious library in the writable RPATH, which is loaded when the FtpCollector executable runs, causing the code in the library t...

8.8CVSS8.5AI score0.00415EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/26 7:11 a.m.18 views

CVE-2021-28249

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is ru...

8.8AI score0.00415EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2021/03/26 7:4 a.m.15 views

CVE-2021-28246

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be...

6.9AI score0.00393EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/03/26 7:4 a.m.16 views

CVE-2021-28246

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be...

7.7AI score0.00393EPSS
Exploits1References1
CVE
CVE
added 2021/03/26 7:4 a.m.50 views

CVE-2021-28246

CVE-2021-28246 affects CA eHealth Performance Manager up to version 6.3.2.12. The issue is a privilege-escalation defect where a regular user can place a malicious library in the writable RPATH, which is dynamically linked when the emtgtctl2 executable runs, causing the library code to execute wi...

7.8CVSS7.5AI score0.00393EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2020/10/21 3:15 p.m.4 views

CVE-2020-14840

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

4.7CVSS6.7AI score0.00973EPSS
Exploits0References1
NVD
NVD
added 2020/10/21 3:15 p.m.16 views

CVE-2020-14840

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

4.7CVSS0.00973EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/10/21 2:4 p.m.11 views

CVE-2020-14840

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

4.7CVSS5.7AI score0.00973EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/10/21 2:4 p.m.20 views

CVE-2020-14840

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

4.7CVSS4.5AI score0.00973EPSS
Exploits0References1
NCSC
NCSC
added 2020/10/21 12:0 a.m.5 views

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in the following Oracle E-Business Suite products: Applications Manager Marketing Application Object Library Trade Management Universal Work Queue Installed Base CRM Technical Foundation One-to-One Fulfillment Applications Framework E-Business Suite Secure...

10CVSS7.7AI score0.02797EPSS
Exploits0
Rows per page
Query Builder