CVE-2019-2782

CVE-2019-2782 affects Oracle E-Business Suite, specifically the Payments component (File Transmission). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability enables an unauthenticated attacker with network access via HTTP to read sensitive data within Oracle Payments. CVSS v3.0 b...

CVE-2019-2773

CVE-2019-2773 affects Oracle E-Business Suite Payments (subcomponent: File Transmission). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to read data from Oracle Payments. Root cause details are not expanded b...

CVE-2019-2782

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2782

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle E-Business Suite Multiple Vulnerabilities (Jul 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the July 2019 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle Field Service...

The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain access to Oracle Payments or execute arbitrary codes.

The vulnerability of the Oracle Payments component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability can allow a malicious actor to gain access to Oracle Payments or execute arbitrary code...

CVE-2015-4849

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the...

CVE-2015-4849

CVE-2015-4849 corresponds to an XXE injection vulnerability in Oracle E-Business Suite’s Punch-in path. The ERPScan advisory (ERPSCAN-15-029) and related sources indicate: affected product/version is Oracle E‑Business Suite 12.1.3 (likely others); vulnerable component is the Punch‑in servlet at /...

Oracle E-Business Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the Online Patching subcomponent in the Applications DBA. An...

CVE-2014-6561

Technical details about CVE-2014-6561 are not publicly provided in the supplied documents. Monitor for updates from Oracle CPU advisories and external references.

CVE-2007-3867

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...

CVE-2007-3867

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...