Lucene search
+L

405 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•4 views

CVE-2022-21477: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments, File Upload. Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.4CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/19 12:00 a.m.•3 views

CVE-2022-21468: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. Supported versions that are affected are 12.2.4-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

6.1CVSS6.2AI score0.00891EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/19 12:00 a.m.•15 views

Oracle E-Business Suite 输入验证错误漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Payments is one of the payment management components.Scripting is on...

6.1CVSS6.8AI score0.00891EPSS
SaveExploits0References4
OSV
OSV
•added 2021/10/20 11:16 a.m.•11 views

CVE-2021-2477

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Session Management. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

5.3CVSS7.3AI score0.01463EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/20 11:16 a.m.•20 views

Design/Logic Flaw

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Session Management. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

5CVSS5.1AI score0.01463EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/10/20 11:16 a.m.•6 views

CVE-2021-2477

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Session Management. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

5.3CVSS6.7AI score0.01463EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•16 views

Oracle E-Business Suite和Oracle Applications Framework 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP enterprise resource planning management, HR human resource management, CRM customer relationship management and other collections of management software, a seamlessly integrated management suite. Oracle...

5.3CVSS5.7AI score0.01463EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/21 3:15 p.m.•14 views

CVE-2021-2380

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS7.3AI score0.0069EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/21 3:15 p.m.•23 views

CVE-2021-2380

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS0.0069EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/21 3:15 p.m.•21 views

Design/Logic Flaw

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

4.9CVSS7.7AI score0.0069EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/20 10:43 p.m.•31 views

CVE-2021-2380

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS8.1AI score0.0069EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/20 10:43 p.m.•87 views

CVE-2021-2380

CVE-2021-2380 affects Oracle E-Business Suite, specifically the Oracle Applications Framework (Attachments / File Upload). Affected are EBS versions 12.1.3 and 12.2.3-12.2.10. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise the Oracle Applications F...

7.6CVSS7.5AI score0.0069EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•1 views

PT-2021-7158

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing a low-privileged attacke...

7.9CVSS0.0069EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2380: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS5.7AI score0.0069EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•13 views

The vulnerability of the Home Page component of the Oracle Applications Framework allows a perpetrator to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Home Page component of the Oracle Applications Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data, or to gain full control over the applicati...

9.4CVSS6.8AI score0.01191EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2021/04/23 12:00 a.m.•107 views

Oracle E-Business Suite Multiple Vulnerabilities (April 2021 CPU)

The version of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version th...

9.1CVSS6.5AI score0.92907EPSS
SaveExploits8References74
OSV
OSV
•added 2021/04/22 10:15 p.m.•12 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS6.6AI score0.01191EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/22 9:53 p.m.•92 views

CVE-2021-2200

CVE-2021-2200 affects Oracle E-Business Suite, specifically the Oracle Applications Framework Home page in version 12.2.10. The vulnerability is described as easily exploitable via unauthenticated HTTP access, enabling an attacker to compromise the Oracle Applications Framework and potentially pe...

9.1CVSS8.5AI score0.01191EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/04/22 9:53 p.m.•17 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS7.1AI score0.01191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/22 9:53 p.m.•34 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework...

9.1CVSS8.7AI score0.01191EPSS
SaveExploits0References1
Rows per page
Query Builder