21500 matches found
CVE-2021-2227
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...
CVE-2021-2228
Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2021-2224
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2021-2228
CVE-2021-2228 affects Oracle E-Business Suite, Oracle Incentive Compensation UI. Affected versions: 12.1.3 and 12.2.3–12.2.10. The issue allows a low-privileged, network-authenticated attacker (HTTP) to trigger unauthorized create/delete/modify actions on Oracle Incentive Compensation data, poten...
CVE-2021-2227
CVE-2021-2227 affects Oracle E-Business Suite, Oracle Cash Management component Bank Account Transfer, in versions 12.1.1–12.1.3. The vulnerability is exploitable by a low-privilege, network-accessing attacker over HTTP, potentially allowing unauthorized creation, deletion, or modification of Ora...
CVE-2021-2227
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite component: Bank Account Transfer. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Managemen...
CVE-2021-2231
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...
CVE-2021-2229
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: LOVs. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks o...
CVE-2021-2224
CVE-2021-2224 affects Oracle E-Business Suite, Compensations Workbench component (versions 12.1.1–12.1.3). A low-privilege, network-accessible attacker can exploit via HTTP to read/modify data across Oracle Compensation Workbench data; impact includes unauthorized creation, deletion or modificati...
CVE-2021-2225
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite component: DBI Setups. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business...
CVE-2021-2223
CVE-2021-2223 affects Oracle E-Business Suite with Oracle Receivables (component: Receipts) for versions 12.1.1–12.1.3. The Red Hat and NVD records describe an easily exploitable issue where a low-privilege, network-accessing attacker over HTTP can compromise Oracle Receivables, potentially causi...
CVE-2021-2222
CVE-2021-2222 affects Oracle E-Business Suite, specifically the Template Search component of the Presentment Architecture . Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data integrity and con...
CVE-2021-2223
Vulnerability in the Oracle Receivables product of Oracle E-Business Suite component: Receipts. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Receivables. Successful attacks...
CVE-2021-2222
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2222
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite component: Template Search. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2021-2223
Vulnerability in the Oracle Receivables product of Oracle E-Business Suite component: Receipts. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Receivables. Successful attacks...
CVE-2021-2205
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.2.7-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...
CVE-2021-2210
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
CVE-2021-2209
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Emai...
CVE-2021-2209
This CVE concerns Oracle E-Business Suite’s Oracle Email Center (Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege attacker with network access via HTTP to compromise Oracle Email Center, potentially leading to unauthorized access to sensit...