CVE-2021-2237

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General...

CVE-2021-2233

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Setup. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2235

The CVE-2021-2235 entry concerns Oracle E-Business Suite’s Oracle Transportation Execution Install and Upgrade component (versions 12.1.1–12.1.3). The Red Hat and NVD/CVE records concur that a low-privilege, network-accessible via HTTP vulnerability can lead to unauthorized creation, deletion or ...

CVE-2021-2241

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2021-2239

The CVE-2021-2239 entry corresponds to a vulnerability in Oracle E-Business Suite Time and Labor (Timecard). Affected are Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, network-accessible attacker over HTTP to compromise Time and Labor, leadin...

CVE-2021-2241

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of...

CVE-2021-2238

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Process Operations. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for...

CVE-2021-2235

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Install and Upgrade. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2238

CVE-2021-2238 affects Oracle MES for Process Manufacturing (Oracle E-Business Suite, component: Process Operations) and is exploitable in affected 12.1.3 with network access via HTTP. The issue allows a low-privilege attacker to create, delete, or modify data across Oracle MES for Process Manufac...

CVE-2021-2239

Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite component: Timecard. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and...

CVE-2021-2237

Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite component: Account Hierarchy Manager. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General...

CVE-2021-2235

Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite component: Install and Upgrade. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2238

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Process Operations. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for...

CVE-2021-2233

CVE-2021-2233 affects Oracle E-Business Suite, Oracle Enterprise Asset Management (Setup). Affects 12.1.1–12.1.3 and 12.2.3–12.2.10. An attacker with network access via HTTP and low privileges can compromise E-Business Suite, potentially unauthorized create/delete/modify of data across Oracle E-B...

CVE-2021-2241

CVE-2021-2241 affects Oracle iStore in Oracle E-Business Suite (Shopping Cart component) and is listed for affected versions 12.1.1–12.1.3. The Red Hat, CNVD, CNNVD, NVD, PRION, and other feeds confirm that a low-privilege attacker with network access over HTTP can compromise Oracle iStore, enabl...

CVE-2021-2229

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: LOVs. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks o...

CVE-2021-2231

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...

CVE-2021-2225

CVE-2021-2225 affects Oracle E-Business Intelligence (DBI Setups) in Oracle E-Business Suite, versions 12.1.1–12.1.3. The root cause is a vulnerability in the DBI Setups component that permits an attacker with network access via HTTP and low privileges to compromise Oracle E-Business Intelligence...

CVE-2021-2229

The CVE-2021-2229 entry describes a vulnerability in Oracle E-Business Suite (Depot Repair LOVs component) affecting 12.1.1–12.1.3. The issue allows a network-based, low-privilege attacker (via HTTP) to trigger unauthorized creation/deletion/modification of data or gain access to sensitive data w...

CVE-2021-2225

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: DBI Setups. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business...