Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle acaba de revelar una nueva vulnerabilidad, CVE-2025-61884; el script de detección para esa vulnerabilidad se puede encontrar en este repositorio o, originalmente, aquí:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Según se cita en e...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 与 CVE-2025-61884 编辑说明：Oracle 刚刚披露了一个新漏洞 CVE-2025-61884，该漏洞的检测脚本可在此仓库中找到，原始来源为：https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550。 引用自 Oracle 安全公告： 本安全公告针对 Oracle E-Business Suite 中的漏洞 CVE-2025-61882。该漏洞可远程利用且无需身份验证，即攻击者可通过网络利用该漏洞，无需提供用户名和密码。若成功利用，该漏洞可能导致远程代码执行。...

CVE-2026-46817

🚨 CVE-2026-46817 - 重大なリモートコード実行 Oracle E-Business Suite – Oracle Payments ファイル転送 Oracle Payments（ファイル転送）に影響する重要な未認証リモート脆弱性であり、HTTP経由でアプリケーションを完全に侵害される可能性があります。 📌 概要 CVE-2026-46817 は、Oracle E-Business Suite の Oracle Payments コンポーネントにおける重大な 脆弱性です。この欠陥は ファイル転送 機能に影響し、認証なしでリモートからHTTP経由 で悪用される可能性があります...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

信息安全：GDPR合规与应急响应 一个面向高风险生物特征监控系统（CCTV、人脸识别技术和集中式接触追踪）的全面安全与隐私合规框架，包括框架比较分析（ISO 27001、Cyber Essentials、NIST CSF 2.0、COBIT）以及针对2025年Oracle E-Business Suite CVE-2025-61882入侵事件的详细应急响应案例研究。 目录 项目概述 第1章：数据保护合规 隐私设计与默认保护（DPbD） 框架比较分析 安全实施与应急响应 第2章：Oracle EBS入侵案例研究 CVE-2025-61882分析 攻击者TTP与防御对策 风险评估与缓解策略...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

CVE-2026-61231

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in various components of the Oracle E-Business Suite, including General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and other modules within versions 12.2.3 through 12.2.15. These vulnerabilities enable attackers with low to high...

CVE-2026-71104

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...

CVE-2026-70945

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. While the...

CVE-2026-70947

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-70931

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow...

CVE-2026-70926

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow...

CVE-2026-70918

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Outbound Data. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful...

CVE-2026-70844

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70845

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70839

Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials...

CVE-2026-70833

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed...