CVE-2021-2255

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite component: Authoring. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts...

CVE-2021-2254

CVE-2021-2254 affects Oracle E-Business Suite, Hold Management in Oracle Project Contracts (versions 12.1.1–12.1.3). The vulnerability allows a network-based, low-privilege attacker to compromise data integrity and confidentiality (C) via HTTP, with potential unauthorized creation, deletion, or m...

CVE-2021-2252

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Loan Details, Loan Accounting Events. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans...

CVE-2021-2260

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: iRecruitment. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful...

CVE-2021-2251

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Data Source. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

CVE-2021-2249

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Shipment Workbench. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2021-2251

Oracle E-Business Suite’s Oracle CRM Technical Foundation Data Source vulnerability (CVE-2021-2251) affects 12.1.3 and 12.2.3–12.2.10. A low-privilege, network-accessible attacker via HTTP can compromise the foundation, potentially unauthorized creation, deletion or modification of data, or acces...

CVE-2021-2246

CVE-2021-2246 targets Oracle E-Business Suite, specifically the Oracle Universal Work Queue’s Work Provider Site Level Administration. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise the Work Queue, leading to una...

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2021-2251

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Data Source. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM...

CVE-2021-2247

Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite component: Admin. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanc...

CVE-2021-2249

CVE-2021-2249 affects Oracle E-Business Suite, specifically the Oracle Landed Cost Management shipment workbench. A vulnerability in supported releases 12.1.1–12.1.3 and 12.2.3–12.2.10 allows a low-privilege, network-based attacker (HTTP) to compromise data, potentially enabling unauthorized crea...

CVE-2021-2249

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Shipment Workbench. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2021-2246

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2021-2247

CVE-2021-2247 affects Oracle E-Business Suite, Oracle Advanced Collections (Admin) module. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue enables a low-privileged attacker with network access over HTTP to read/modify or delete data within Oracle Advanced Collections, potentially e...

CVE-2021-2241

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2021-2236

CVE-2021-2236 affects Oracle E-Business Suite, Oracle Financials Common Modules, Advanced Global Intercompany (versions 12.1.1–12.1.3). The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise the module and potentially create, delete, or modify data, granting unaut...

CVE-2021-2233

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Setup. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2237

CVE-2021-2237 affects Oracle E-Business Suite's Oracle General Ledger, specifically the Account Hierarchy Manager, with vulnerable versions 12.1.1–12.1.3. The vulnerability allows a low-privilege, network-based attacker (via HTTP) to compromise the General Ledger, potentially enabling unauthorize...

CVE-2021-2239

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Timecard. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and...