Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in the following Oracle E-Business Suite products: Applications Manager Marketing Application Object Library Trade Management Universal Work Queue Installed Base CRM Technical Foundation One-to-One Fulfillment Applications Framework E-Business Suite Secure...

PT-2020-4633

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue version 12.1.3 Description The issue is related to insufficient input validation in the Work Provider Administration component of the Oracle Universal Work Queue application. This can be exploited by a remote attack...

PT-2020-4432

Name of the Vulnerable Software and Affected Versions: Oracle Universal Work Queue versions 12.2.3 through 12.2.9 Description: The issue is related to insufficient input validation in the Internal Operations component of Oracle Universal Work Queue, part of the Oracle E-Business Suite. This can b...

CVE-2020-14855: Undefined Security Weakness

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Univers...

CVE-2020-14862: Undefined Security Weakness

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3 - 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Universal...

Unspecified Vulnerability in Oracle E-Business Suite Universal Work Queue

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Universal Work Queue is one of the tools that c...

CVE-2020-2819

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2819

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2819

CVE-2020-2819 affects Oracle E-Business Suite Universal Work Queue (component: Work Provider Administration) and multiple supported versions (12.1.1–12.1.3). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Universal Work Queue; successful attack...

CVE-2020-2818

CVE-2020-2818 affects Oracle E-Business Suite’s Oracle Universal Work Queue (Work Provider Administration) for versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the Work Queue, with attacks requiring user interaction. Impact i...

CVE-2020-2818: Undefined Security Weakness

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2819: Undefined Security Weakness

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2020-2392

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the Work Provider Administration component of Oracle Universal Work Queue, allowing a remote attacker to gain...

PT-2020-2393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Work Provider Administration component of Oracle Universal Work Queue, allowing an unauthenticated attacker with networ...

CVE-2017-10332

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-10332

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...