Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
OracleApplications Framework

27 matches found

CVE
CVE•added 2022/04/19 9:15 p.m.•107 views

CVE-2022-21468

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported versions that are affected are 12.2.4-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framewo...

6.1CVSS5.6AI score0.00837EPSS
CVE
CVE•added 2022/04/19 9:15 p.m.•79 views

CVE-2022-21477

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle App...

5.4CVSS5AI score0.00185EPSS
CVE
CVE•added 2017/04/24 7:59 p.m.•76 views

CVE-2017-3528

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated at...

5.8CVSS4.2AI score0.43239EPSS
CVE
CVE•added 2021/04/22 10:15 p.m.•60 views

CVE-2021-2200

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework....

9.1CVSS8.5AI score0.01723EPSS
CVE
CVE•added 2022/10/18 9:15 p.m.•60 views

CVE-2022-21636

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.2.6-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applicati...

6.5CVSS6.4AI score0.00419EPSS
CVE
CVE•added 2022/07/19 10:15 p.m.•58 views

CVE-2022-21566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.9-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Fr...

7.5CVSS7.7AI score0.04199EPSS
CVE
CVE•added 2023/07/18 9:15 p.m.•56 views

CVE-2023-22042

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Fr...

6.1CVSS5.8AI score0.00247EPSS
CVE
CVE•added 2024/04/16 10:15 p.m.•55 views

CVE-2024-21080

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services). Supported versions that are affected are 12.2.9-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications F...

6.5CVSS7.1AI score0.00417EPSS
CVE
CVE•added 2021/07/21 3:15 p.m.•53 views

CVE-2021-2380

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

7.6CVSS7.5AI score0.00486EPSS
CVE
CVE•added 2025/04/15 9:16 p.m.•50 views

CVE-2025-30718

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle App...

5.4CVSS4.5AI score0.00034EPSS
CVE
CVE•added 2018/10/17 1:31 a.m.•49 views

CVE-2018-2971

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via ...

4.3CVSS3.7AI score0.00271EPSS
CVE
CVE•added 2018/10/17 1:31 a.m.•49 views

CVE-2018-3243

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

8.2CVSS7.8AI score0.00826EPSS
CVE
CVE•added 2018/10/17 1:31 a.m.•45 views

CVE-2018-3138

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with ne...

8.2CVSS7.8AI score0.00826EPSS
CVE
CVE•added 2019/04/23 7:32 p.m.•45 views

CVE-2019-2682

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker wit...

8.2CVSS8.1AI score0.01204EPSS
CVE
CVE•added 2024/07/16 11:15 p.m.•45 views

CVE-2024-21148

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

4.8CVSS4.4AI score0.0008EPSS
CVE
CVE•added 2020/01/15 5:15 p.m.•44 views

CVE-2020-2666

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle A...

5.3CVSS5.2AI score0.01405EPSS
CVE
CVE•added 2020/04/15 2:15 p.m.•43 views

CVE-2020-2890

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Appli...

8.2CVSS8.2AI score0.02221EPSS
CVE
CVE•added 2023/10/17 10:15 p.m.•43 views

CVE-2023-22076

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...

6.1CVSS5.8AI score0.0019EPSS
CVE
CVE•added 2020/10/21 3:15 p.m.•42 views

CVE-2020-14746

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows). Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

5.8CVSS4.4AI score0.00673EPSS
CVE
CVE•added 2025/04/15 9:16 p.m.•42 views

CVE-2025-30711

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle App...

5.4CVSS4.8AI score0.00032EPSS
CVE
CVE•added 2016/04/21 11:0 a.m.•41 views

CVE-2016-3447

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core.

6.9CVSS6.2AI score0.00295EPSS
CVE
CVE•added 2020/01/15 5:15 p.m.•41 views

CVE-2020-2566

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromi...

4.7CVSS4.6AI score0.00978EPSS
CVE
CVE•added 2021/10/20 11:16 a.m.•41 views

CVE-2021-2477

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

5.3CVSS4.9AI score0.0158EPSS
CVE
CVE•added 2020/07/15 6:15 p.m.•39 views

CVE-2020-14590

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Page Request). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Appl...

4CVSS3.2AI score0.00202EPSS
CVE
CVE•added 2020/04/15 2:15 p.m.•39 views

CVE-2020-2866

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ap...

5.3CVSS4.8AI score0.00978EPSS
CVE
CVE•added 2020/07/15 6:15 p.m.•37 views

CVE-2020-14534

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Suc...

8.2CVSS8.3AI score0.02194EPSS
CVE
CVE•added 2020/07/15 6:15 p.m.•37 views

CVE-2020-14610

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applicati...

7.6CVSS7.7AI score0.00657EPSS