CVE-2021-2271

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Resource Exceptions. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work ...

CVE-2021-2276

CVE-2021-2276 affects Oracle E-Business Suite iSetup, specifically the General Ledger Update Transform and Reports components. Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise iSetup, potentially leadin...

CVE-2021-2275

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: View Reports. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2273

Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite component: Create Contracts. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Legal...

CVE-2021-2275

CVE-2021-2275 corresponds to a vulnerability in Oracle Applications Manager (View Reports) within Oracle E-Business Suite. Affected are 12.1.3 and 12.2.3–12.2.10. The issue allows a highly privileged attacker with network access via HTTP to compromise Oracle Applications Manager, enabling unautho...

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

CVE-2021-2272

CVE-2021-2272 affects Oracle E-Business Suite Subledger Accounting Inquiries (versions 12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can compromise Subledger Accounting, potentially leading to unauthorized creation, deletion or modification of data, or unauthorized access...

CVE-2021-2274

CVE-2021-2274 affects Oracle E-Business Tax UI in Oracle E-Business Suite, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege attacker who can reach the system over HTTP to cause unauthorized creation, deletion, or modification of critical data, or gain unau...

CVE-2021-2270

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Sites. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this...

CVE-2021-2267

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution...

CVE-2021-2268

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

CVE-2021-2262

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Endeca. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Purchasing. Successful attacks of this...

CVE-2021-2270

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Sites. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this...

CVE-2021-2269

CVE-2021-2269 affects Oracle E-Business Suite, Oracle Advanced Pricing, Price Book in version 12.1.3. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise data, potentially enabling unauthorized creation/deletion/modification of Oracle Advanced Pricing d...

CVE-2021-2268

CVE-2021-2268 affects Oracle E-Business Suite, Oracle Quoting Courseware (versions 12.1.1–12.1.3). The vulnerability allows a low-privilege, network-accessible attacker over HTTP to compromise Oracle Quoting, potentially leading to unauthorized creation, deletion, or modification of data or acces...

CVE-2021-2262

CVE-2021-2262 affects Oracle E-Business Suite Purchasing (Endeca) 12.1.3. The Endeca component is vulnerable, and a low-privileged attacker with network access via HTTPS can compromise Oracle Purchasing, potentially causing unauthorized creation, deletion, or modification of data or full data acc...

CVE-2021-2262

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Endeca. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Purchasing. Successful attacks of this...

CVE-2021-2263

CVE-2021-2263 affects Oracle E-Business Suite Oracle Sourcing Intelligence/RFx (12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can cause unauthorized creation/modification/deletion of data or access to Oracle Sourcing data. Public descriptions consistently state CVSS v3.1 ...

CVE-2021-2261

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2021-2263

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Intelligence, RFx. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful...