Oracle E-Business Suite (Apr 2022 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Popups. Supported versions that are affect...

CVE-2022-21477

CVE-2022-21477 affects Oracle E-Business Suite’s Oracle Applications Framework (Attachments, File Upload). Affected versions are 12.2.6–12.2.11. The issue allows a low-privilege, network-accessible attacker over HTTP to compromise the framework; successful attacks require user interaction and may...