CVE-2021-2361

CVE-2021-2361 affects Oracle E-Business Suite, specifically the Oracle Advanced Inbound Telephony SDK client integration component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10 . The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise data through...

CVE-2016-3532

CVE-2016-3532 is an Unspecified vulnerability in the Oracle E-Business Suite Advanced Inbound Telephony component for versions 12.1.1–12.1.3 . The issue affects the SDK client integration path and is described as allowing remote attackers to impact confidentiality and integrity via unspecified ve...

CVE-2026-34275

Oracle E-Business Suite's Oracle Advanced Inbound Telephony (Setup and Administration) is affected in versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the system, with impacts to confidentiality, integrity, and availability ...

CVE-2026-70722

CVE-2026-70722 affects Oracle E-Business Suite (Advanced Inbound Telephony, Internal Operations) versions 12.2.3-12.2.15, exploitable over HTTPS by an unauthenticated attacker. CVSS 8.2 (HIGH) yields unauthorized data modification/deletion and partial DoS. Oracle's August 2026 CPU advisory (cspua...

CVE-2026-61256

The CVE-2026-61256 entry concerns Oracle E-Business Suite’s Oracle Advanced Inbound Telephony (Servers component). Affected are 12.2.3–12.2.15. The vulnerability permits a low-privilege, unauthenticated attacker with network access via HTTP to perform unauthorized updates, inserts, or deletes on ...

CVE-2026-60491

CVE-2026-60491 affects Oracle E-Business Suite, Oracle Advanced Inbound Telephony (SDK client integration) for versions 12.2.3–12.2.15. The vulnerability can be exploited remotely over HTTP by a low-privileged user, potentially leading to unauthorized update/insert/delete of Oracle Advanced Inbou...

CVE-2026-70725

Oracle E-Business Suite 12.2.3–12.2.15, Advanced Inbound Telephony component (Internal Operations), is vulnerable to network-based HTTP attacks by low-privileged attackers, enabling unauthorized data access and partial DoS (CVSS 7.6). No in-the-wild exploitation reported. Patch details: https://w...