88 matches found
CVE-2015-4854
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle...
CVE-2015-4854
Oracle E-Business Suite Cross-site Scripting (CVE-2015-4854) affects Oracle E-Business Suite 12.1.4 (likely others) via the CfgOCIReturn servlet’s Domain parameter not being sanitized, enabling remote XSS and potential script injection. Remediation per sources: apply the October 2015 CPU/patch se...
CVE-2015-4884
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon...
CVE-2015-4854: Undefined Security Weakness
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle...
PT-2015-2490
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4 Description The issue is related to errors in the code of the Oracle Report Manager component, specifically the Reports Security subcomponent, which can allow a remote...
PT-2015-2489
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4 Description The issue affects the confidentiality and integrity of the system, potentially allowing remote attackers to impact it via unknown vectors related to Reports...
CVE-2015-4884: Undefined Security Weakness
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon...
Oracle E-Business Multiple Vulnerabilities (October 2015 CPU)
The version of Oracle E-Business installed on the remote host is missing the October 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the Online Patching subcomponent in the Applications DBA. An...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon...
CVE-2013-3777
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon...
CVE-2013-3777
The CVE-2013-3777 issue affects Oracle E-Business Suite, specifically the Oracle Application Object Library component, in versions 11.5.10.2, 12.0.6, and 12.1.3. The root cause is an unspecified vulnerability related to Signon that could compromise integrity via remote access (no confidentiality ...
CVE-2013-3777
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon...
PT-2013-4616
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Signon in the Oracle Application Object Library...
CVE-2013-3777: Undefined Security Weakness
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon...
CVE-2012-3222
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Signon...
CVE-2012-3222
CVE-2012-3222 affects the Oracle iRecruitment component in Oracle E-Business Suite (versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3). The issue is described as an unspecified vulnerability that could allow remote attackers to affect availability via unknown vectors related to Signon. The publi...
PT-2012-4577
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to Signon in the Oracle iRecruitme...
CVE-2012-3222: Undefined Security Weakness
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect availability via unknown vectors related to Signon...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon local and SSO...