Partner Perspectives: Faster Response with Carbon Black and Tines.io

Tines was founded by former DocuSign and eBay security engineers who were frustrated by existing security automation platforms. “I was leading an enterprise security team that had to work harder and harder every day just to keep up with the volume of alerts that required investigation,” said Eoin...

Design/Logic Flaw

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

Design/Logic Flaw

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

CVE-2017-10066

The CVE-2017-10066 issue concerns Oracle Applications Technology Stack (Oracle Forms) within Oracle E-Business Suite. Affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability is exploitable over HTTP by an unauthenticated network attacker and can lead to unauthorized upda...

CVE-2017-10066

Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite subcomponent: Oracle Forms. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

Unspecified Vulnerability in Oracle Applications Technology Stack

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software, of which the Oracle Applications Technology Stack is a component. An unspecified vulnerability exists in the Oracle Forms subcomponent of the Oracle Applications Technology Stack...

Unspecified Vulnerability in Oracle Applications Technology Stack (CNVD-2017-31498)

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software, of which the Oracle Applications Technology Stack is a component. An unspecified vulnerability exists in the Oracle Forms subcomponent of the Oracle Applications Technology Stack...

CVE-2016-3524

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration...

Unspecified Vulnerability in Oracle E-Business Suite Applications Technology Stack

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 contain a security vulnerability in the Applications Technology Stacky component, which can be exploited by a remote attacker to compromise...

Oracle E-Business Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Wireless Framework subcomponent within the CRM Technical Foundation component that...

The vulnerability of the Oracle E-Business Suite system’s automation functionality allows a perpetrator to execute any code with administrator privileges.

The vulnerability of the Oracle Applications Technology Stack component in the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrator privileges remotely...

CVE-2015-4798

Technical details for CVE-2015-4798 are not publicly available in the provided documents. Monitor for updates from official advisories.

The vulnerability of the Oracle E-Business Suite system for automating business processes allows a perpetrator to compromise the integrity of information.

The vulnerability of the Technology stack of the enterprise automation system’s Oracle E-Business Suite is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of information...

CVE-2015-2630

Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup...

Code injection

Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup...

CVE-2015-2630

Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup...

CVE-2015-2630

Oracle E-Business Suite is affected by CVE-2015-2630, a remote URL-redirection vulnerability in the Technology stack (Form Servlet) affecting versions 11.5.10.2, 12.0.6, and 12.1.3. The connected SecurityVULNS entry describes that an attacker can lure a user into following a crafted URL and be re...

Oracle E-Business Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by affected by vulnerabilities in the following components : - Oracle Application Object Library CVE-2015-2618 - Oracle Application Object Library...

CVE-2015-0447

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Configurator DMZ rules...

CVE-2015-0447

CVE-2015-0447 affects Oracle E-Business Suite via the Applications Technology Stack, specifically the Configurator DMZ rules in the Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4. The root cause is a flaw in the Configurator DMZ rules subcomponent that allows remot...