CVE-2021-2189

CVE-2021-2189 affects Oracle E-Business Suite Sales Offline, Template component, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated, network-accessible attacker over HTTP can trigger a hang or crash in Oracle Sales Offline (DoS). The vulnerability is documented across mul...

CVE-2020-14822

CVE-2020-14822 affects Oracle E-Business Suite Installed Base APIs. Affected are Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP by an unauthenticated, network-reachable attacker and, per the entry, requires user interaction, with pote...

CVE-2019-2653

CVE-2019-2653 is a vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (Print Server). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, and 12.2.8. The issue allows an unauthenticated attacker with network access via HTT...

CVE-2018-3017

CVE-2018-3017 affects the Oracle E-Business Suite, specifically the CRM Technical Foundation component (subcomponent: Preferences). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The vulnerability allows an unauthenticated attacker with network access via H...

Micro Focus NetIQ Identity Manager Oracle EBS Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.Oracle EBS driver is one of the EBS...

CVE-2017-9278

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables...

Design/Logic Flaw

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables...

CVE-2017-9278

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables...

CVE-2017-9278

The CVE-2017-9278 entry relates to the NetIQ Identity Manager Oracle EBS driver. Affected component: Oracle EBS driver (NetIQ Identity Manager) prior to version 4.0.2.0. Root cause: the driver logs could contain the driver authentication password, which may be disclosed to any attacker able to re...

CVE-2017-9278 Avoid password disclosure via EBS event logging in the iManager Oracle driver

The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables...

Oracle E-Business Suite 12.x - Server-Side Request Forgery

Exploit Title: Oracle E-Business Suite - Server Side Request Forgery Date: 19 July 2017 Exploit Author: Sarath Nair aka AceNeon13 Contact: @AceNeon13 Greetings: Raj3sh.tv, Deepu.tv Vendor Homepage: www.oracle.com Software Link:...

CVE-2017-3425

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3428

CVE-2017-3428 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment User Interface. Affected versions: 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment; attacks may lead to unauthorized access to ...