CVE-2021-2261

Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2021-2268

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

CVE-2021-2267

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution...

CVE-2021-2261

CVE-2021-2261 affects Oracle E-Business Suite, Oracle Lease and Finance Management Quotes component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The flaw allows a low-privilege, network-accessible attacker (via HTTP) to compromise data, enabling unauthorized creation, deletion, or mod...

CVE-2021-2267

CVE-2021-2267 concerns the Oracle E-Business Suite, specifically the Oracle Labor Distribution UI component. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to compromise Oracle Labor Distribution, potentially leading to unauth...

CVE-2021-2270

CVE-2021-2270 describes a vulnerability in Oracle E-Business Suite, specifically the Oracle Site Hub component. The connected sources confirm affected versions 12.1.1–12.1.3 and indicate an easily exploitable flaw that allows a low-privileged, unauthenticated attacker with network access via HTTP...

CVE-2021-2269

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite component: Price Book. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Pricing. Successful...

CVE-2021-2258

Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...

CVE-2021-2259

Vulnerability in the Oracle Payables product of Oracle E-Business Suite component: India Localization, Results. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2260

The CVE-2021-2260 entry applies to Oracle E-Business Suite, specifically the Oracle Human Resources component iRecruitment in version 12.1.3. The vulnerability allows a low-privileged attacker who can reach the system over HTTP via the network to compromise Oracle Human Resources, enabling unauth...

CVE-2021-2259

Vulnerability in the Oracle Payables product of Oracle E-Business Suite component: India Localization, Results. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2258

CVE-2021-2258 affects Oracle E-Business Suite, Oracle Projects UI. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. Description confirms a low-privilege, network-accessible (HTTP) vulnerability in Oracle Projects that can lead to unauthorized create/delete/modify of critical data or access to...

CVE-2021-2252

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Loan Details, Loan Accounting Events. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans...

CVE-2021-2254

Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite component: Hold Management. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts...

CVE-2021-2260

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: iRecruitment. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful...

CVE-2021-2258

Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...

CVE-2021-2254

Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite component: Hold Management. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts...

CVE-2021-2259

CVE-2021-2259 affects Oracle E-Business Suite Payables (India Localization, Results). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. An attacker with network access via HTTP and low privileges can compromise Oracle Payables, with potential unauthorized creation/deletion/modification of d...

CVE-2021-2255

CVE-2021-2255 is a vulnerability in Oracle E-Business Suite, specifically the Oracle Service Contracts Authoring component. Affected versions are 12.1.1–12.1.3; an unauthenticated, low-privileged attacker with network access via HTTP can compromise Oracle Service Contracts, leading to unauthorize...

CVE-2021-2252

CVE-2021-2252 affects Oracle E-Business Suite’s Oracle Loans module (Loan Details, Loan Accounting Events). Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion, or...