Oracle E-Business Suite 12.2.3 - IESFOOTPRINT SQL Injection Vulnerability

Exploit for jsp platform in category web applications Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017...

Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection

Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Dmitry Chastuhin ERPScan Description 1. ADVISORY...

CVE-2017-3549

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite subcomponent: Scripting Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network...

CVE-2017-3549

CVE-2017-3549 affects Oracle E-Business Suite (Scripting Administration) with an SQL injection in iesfootprint.jsp. Affected versions include 12.2.3 (and 12.1.1–12.1.3 and 12.2.3–12.2.6 per the April 2017 CPU). The vulnerability permits unauthenticated, network-based access via HTTP to read/modif...

Oracle E-Business Suite 12.2.3 SQL Injection

Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Dmitry Chastuhin ERPScan Description 1. ADVISORY...

Oracle E-Business Multiple Vulnerabilities (April 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Oracle Marketing component within the User Interface subcomponent that allows...