Oracle E-Business Suite (Jan 2022 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Intelligence, RFx Creation. Supported versions that ar...

CVE-2022-21274

CVE-2022-21274 affects Oracle E-Business Suite Sourcing (component: Intelligence, RFx Creation). Affected versions are 12.2.3–12.2.11. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Sourcing, enabling unauthorized creation, deletion or modificat...

CVE-2022-21274: Undefined Security Weakness

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Intelligence, RFx Creation. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing...

PT-2022-2131

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.11 Description The issue is related to insufficient input validation in the Intelligence, RFx Creation component of Oracle Sourcing. It allows a low-privileged attacker with network access v...