Lucene search
K

111 matches found

Nuclei
Nuclei
added 17 hours ago11 views

Oracle E-Business Suite - Server-Side Request Forgery

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. id:...

7.5CVSS7.3AI score0.51081EPSS
Exploits6References5
EUVD
EUVD
added 2026/04/21 9:31 p.m.1 views

EUVD-2026-24349

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

6.1CVSS5.8AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2026/04/21 9:16 p.m.1 views

CVE-2026-34274

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

6.1CVSS0.0003EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.1 views

CVE-2026-34274

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

6.1CVSS5.8AI score0.0003EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.1 views

PT-2026-34098

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

6.1CVSS5.8AI score0.0003EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/21 12:0 a.m.4 views

Oracle Configurator 安全漏洞

Oracle Configurator is a product service provided by Oracle Corporation in the United States. It enables proactive collection of customer needs and management for Oracle products. This service is part of systems such as the Oracle Ordering System and the Oracle Customer Management System. Version...

6.1CVSS7.2AI score0.0003EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/21 10:25 p.m.1 views

CVE-2026-21972

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

5.3CVSS5.4AI score0.00046EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/21 12:31 a.m.3 views

EUVD-2026-3540

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

5.3CVSS5.4AI score0.00046EPSS
Exploits0References2
OSV
OSV
added 2026/01/20 10:16 p.m.0 views

CVE-2026-21972

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

5.3CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2026/01/20 10:16 p.m.3 views

CVE-2026-21972

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

5.3CVSS0.00046EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:56 p.m.1 views

CVE-2026-21972

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successf...

5.3CVSS7.1AI score0.00046EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/20 12:0 a.m.3 views

PT-2026-3719

Name of the Vulnerable Software and Affected Versions Oracle Configurator versions 12.2.3 through 12.2.15 Description An easily exploitable issue exists in the User Interface component of Oracle Configurator within Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP...

5.3CVSS7.3AI score0.00046EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:52 a.m.2 views

CVE-2021-2078

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

8.2CVSS6.5AI score0.01691EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/10/27 3:53 p.m.134 views

Exploit for Path Traversal in Oracle Configurator

🚨 CVE-2025-61884 — High-Risk Oracle EBS Configurator Info Disc...

7.5CVSS7.9AI score0.51081EPSS
Exploits6
GithubExploit
GithubExploit
added 2025/10/26 12:19 p.m.107 views

Exploit for Path Traversal in Oracle Configurator

CVE-2025-61884 / 61882 Overview This vulnerability poses...

7.5CVSS7.8AI score0.51081EPSS
Exploits6
VulnCheck KEV
VulnCheck KEV
added 2025/10/20 12:0 a.m.5 views

VulnCheck KEV: CVE-2025-61884

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

7.5CVSS5.8AI score0.51081EPSS
In wildExploits6References15
GithubExploit
GithubExploit
added 2025/10/13 10:4 a.m.254 views

Exploit for CVE-2025-61884

CVE-2025-61884 New Oracle E-Business Suite Bug Could Let Hac...

7.5CVSS7.7AI score0.51081EPSS
Exploits6
NCSC
NCSC
added 2025/10/13 7:52 a.m.4 views

Vulnerability fixed in Oracle E-Business Suite

Oracle has fixed a vulnerability in the Oracle Configurator component of Oracle E-Business Suite Specific to versions 12.2.3 through 12.2.14. The vulnerability is located in the Oracle Configurator component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This...

7.5CVSS7.1AI score0.51081EPSS
Exploits6References1
RedhatCVE
RedhatCVE
added 2025/10/13 5:29 a.m.2 views

CVE-2025-61884

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

7.5CVSS6.3AI score0.51081EPSS
Exploits6References1
Tenable Nessus
Tenable Nessus
added 2025/10/13 12:0 a.m.2 views

Oracle E-Business Suite Information (CVE-2025-61884)

The version of Oracle E-Business Suite installed on the remote host is affected by an information disclosure vulnerability as referenced in the CVE-2025-61884 Security Alert Advisory. - Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Runtime UI. Supported...

7.5CVSS7.9AI score0.51081EPSS
Exploits6References2
Rows per page
Query Builder