CVE-2024-21282

The CVE applies to Oracle E-Business Suite, specifically the Common Components used by Oracle Financials. Affected versions are 12.2.3–12.2.13. The root cause is a vulnerability in the authorization mechanism in Oracle Financials that can be exploited by a low-privileged attacker over HTTP to per...

CVE-2024-21279

CVE-2024-21279 affects Oracle E‑Business Suite Auctions (Oracle Sourcing). Affected: 12.2.3–12.2.13. An authenticated, low-privilege attacker with network access via HTTP can cause unauthorized create/delete/modify of Oracle Sourcing data (CVE-2024-21279). CVSS v3.1 base score 8.1 (C/H/I/H/V). No...

CVE-2024-21280

CVE-2024-21280 affects Oracle E-Business Suite, Oracle Service Contracts component (Authoring). Affected versions are 12.2.5–12.2.13. The issue allows a low-privilege, network-accessing attacker over HTTP to create/modify/delete data in Oracle Service Contracts, potentially exposing or corrupting...

CVE-2024-21276

CVE-2024-21276 affects Oracle E-Business Suite, Oracle Work in Process (Messages) for versions 12.2.3–12.2.13. The vulnerability allows a low-privilege, unauthenticated attacker with network access via HTTP to cause unauthorized creation, deletion or modification of data, or other unauthorized ac...

CVE-2024-21278

CVE-2024-21278 affects Oracle E-Business Suite’s Contract Lifecycle Management for Public Sector (Award Processes). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to impersonate legitimate operations, potentially leading to u...

CVE-2024-21275

CVE-2024-21275 affects Oracle E-Business Suite, specifically the Oracle Quoting UI component, with affected versions 12.2.7–12.2.13. The issue arises from weaknesses in the authorization mechanism, enabling a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, delet...

CVE-2024-21271

CVE-2024-21271 affects Oracle E-Business Suite, Oracle Field Service’s Field Service Engineer Portal (versions 12.2.3–12.2.13). The underlying issue is an authorization flaw that allows a low-privileged, networked attacker (HTTP) to create, delete, or modify data in Oracle Field Service, with res...

CVE-2024-21269

The CVE-2024-21269 issue affects Oracle E-Business Suite, specifically the Incentive Compensation component (Compensation Plan) in versions 12.2.3–12.2.13. The root cause, as described in public sources, enables a low-privilege, network-accessible attacker (HTTP) to compromise data, potentially a...

CVE-2024-21266

CVE-2024-21266 affects Oracle E-Business Suite Oracle Advanced Pricing (Price List), versions 12.2.3–12.2.13. Root cause: insufficient authorization due to input validation in Price List, enabling a low-privileged, network-accessive attacker (HTTP) to create, delete, or modify data. Impact aligns...

CVE-2024-21267

CVE-2024-21267 affects Oracle E-Business Suite — Cost Management (component: Cost Planning). Affected are versions 12.2.12–12.2.13. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise Cost Management, potentially leading to unauthorized creation, deletio...

CVE-2024-21265

CVE-2024-21265 affects Oracle E-Business Suite’s Site Hub component, specifically the Site Hierarchy Flows within versions 12.2.3–12.2.13 . The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation, deletion, or modification of data, yielding ...

CVE-2024-21258

CVE-2024-21258 affects Oracle E-Business Suite, specifically the Installed Base product's User Interface. The issue lies in insufficient input validation in the UI component, with affected versions 12.2.3–12.2.14. An unauthenticated attacker with network access via HTTP can read a subset of Oracl...

CVE-2024-21252

CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...

CVE-2024-21250

CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...

CVE-2024-21206

CVE-2024-21206 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Diagnostics) with ECC 11–13. The issue stems from insufficient input validation in Diagnostics, enabling a low-privileged, network-authenticated attacker over HTTP to read a subset of data. The vulnerabili...

PT-2024-33218 · Ruijie · Ruijie Nbr3000D-E Gateway

Name of the Vulnerable Software and Affected Versions: Ruijie NBR3000D-E Gateway affected versions not specified Description: An issue in the Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the "/tool/shell/postgresql.conf" component. Recommendations: At the...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Product Hub versions 12.2.3...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Incentive Compensation version...

CVE-2024-48783

An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Quoting versions 12.2.7 throug...