CVE-2020-14876

CVE-2020-14876 affects Oracle E-Business Suite – Trade Management (UI). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access via HTTP can compromise Trade Management, potentially creating, deleting or modifying data or gaining unauthorized data acce...

CVE-2020-14851

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14856

CVE-2020-14856 affects Oracle E-Business Suite Trade Management (UI). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Trade Management; exploitation requires user interaction. Impact can inclu...

CVE-2020-14851

CVE-2020-14851 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated network attacker can compromise Trade Management via HTTP; attacks require human interaction and may lead to unauthorized access to data and unauthorize...

CVE-2020-14856

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14856

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14851

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14833

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14834

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14833

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14833

CVE-2020-14833 affects Oracle E-Business Suite Trade Management (User Interface). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP with network access and unauthenticated access, with user interaction required for exploitation, potentially leading...

CVE-2020-14834

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14834

CVE-2020-14834 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue is exploitable over HTTP by a remote attacker and can lead to unauthorized access or data manipulation in Oracle Trade Management data; CVSS v3.1 base score 8.2 ...

CVE-2020-14808

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

CVE-2020-14808

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

CVE-2020-14808

CVE-2020-14808 affects Oracle E-Business Suite Trade Management (UI) on versions 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker can exploit over HTTP to access or modify data, with user interaction required. CVSS v3.1 base score 8.2 (C:H, I:L) indicating high confidentiality impact and lo...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in the following Oracle E-Business Suite products: Applications Manager Marketing Application Object Library Trade Management Universal Work Queue Installed Base CRM Technical Foundation One-to-One Fulfillment Applications Framework E-Business Suite Secure...

The vulnerability of the Invoice component in the Oracle Trade Management application allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Invoice component in the Oracle Trade Management application is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or compromise the integrity of the...

CVE-2020-14665

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

CVE-2020-14665

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...