E-business Suite@12.1.3 Security Vulnerabilities and Issues — E-business Suite@12.1.3 CVE List

Lucene search

OracleE-business Suite12.1.3

133 matches found

CVE•added 2015/07/16 11:0 a.m.•92 views

CVE-2015-4765

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard.

3.5CVSS5.4AI score0.0015EPSS

CVE•added 2014/10/15 3:55 p.m.•70 views

CVE-2014-4278

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.

7.5CVSS5.9AI score0.01231EPSS

CVE•added 2015/10/21 11:59 p.m.•64 views

CVE-2015-4886

Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Reports Security. NOTE: the previous information is from the Octob...

6.4CVSS6.1AI score0.00691EPSS

CVE•added 2015/10/21 11:59 p.m.•59 views

CVE-2015-4846

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to SQL Extensions. NOTE: the previous information is from the...

3.6CVSS6.7AI score0.0031EPSS

CVE•added 2016/01/21 3:0 a.m.•57 views

CVE-2016-0459

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.

4CVSS4.8AI score0.0015EPSS

CVE•added 2015/10/21 11:59 p.m.•56 views

CVE-2015-4845

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 C...

4.3CVSS5.5AI score0.00539EPSS

CVE•added 2016/01/21 3:1 a.m.•56 views

CVE-2016-0527

Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to User GUI, a different vulnerability than CVE-2016-0528,...

6.4CVSS5AI score0.00311EPSS

CVE•added 2015/07/16 11:0 a.m.•54 views

CVE-2015-2652

Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Web Management.

5CVSS5.9AI score0.00367EPSS

CVE•added 2016/01/21 3:1 a.m.•54 views

CVE-2016-0528

6.4CVSS5AI score0.00311EPSS

CVE•added 2015/07/16 10:59 a.m.•52 views

CVE-2015-2615

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to Portal.

5CVSS5.7AI score0.00321EPSS

CVE•added 2018/04/19 2:29 a.m.•52 views

CVE-2018-2874

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows physical access to compromise Oracle Application Object Library. Successful attacks require ...

4.3CVSS4AI score0.00139EPSS

CVE•added 2013/01/17 1:55 a.m.•50 views

CVE-2013-0390

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages.

2.1CVSS5.4AI score0.0015EPSS

CVE•added 2019/01/16 7:30 p.m.•50 views

CVE-2019-2396

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

4.7CVSS4.7AI score0.0083EPSS

CVE•added 2015/01/21 6:59 p.m.•49 views

CVE-2015-0393

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previo...

6CVSS6.5AI score0.01753EPSS

CVE•added 2015/01/21 7:59 p.m.•49 views

CVE-2015-0415

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Session Management.

4CVSS5.3AI score0.00431EPSS

CVE•added 2015/10/21 11:59 p.m.•49 views

CVE-2015-4849

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the Octo...

6.8CVSS6AI score0.01418EPSS

CVE•added 2014/07/17 11:17 a.m.•48 views

CVE-2014-4248

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows local users to affect confidentiality via unknown vectors related to Logging.

1CVSS5.3AI score0.00081EPSS

CVE•added 2015/07/16 11:0 a.m.•48 views

CVE-2015-2645

Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors.

3.5CVSS5.6AI score0.00139EPSS

CVE•added 2015/10/21 11:59 p.m.•48 views

CVE-2015-4884

5CVSS5.7AI score0.00321EPSS

CVE•added 2019/01/16 7:30 p.m.•48 views

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Management Plan). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c...

9.1CVSS8.2AI score0.0158EPSS

CVE•added 2019/01/16 7:30 p.m.•48 views

CVE-2019-2485

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker ...

4.7CVSS4.7AI score0.0083EPSS

CVE•added 2019/01/16 7:30 p.m.•48 views

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker ...

4.3CVSS4.8AI score0.0083EPSS

CVE•added 2013/04/17 12:19 p.m.•47 views

CVE-2013-1524

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments.

4.3CVSS5.9AI score0.00311EPSS

CVE•added 2014/10/15 3:55 p.m.•47 views

CVE-2014-6471

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OAM Diagnostics.

4.3CVSS5.8AI score0.00397EPSS

CVE•added 2018/04/19 2:29 a.m.•47 views

CVE-2018-2804

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

7.4CVSS7.3AI score0.01715EPSS

CVE•added 2014/07/17 11:17 a.m.•46 views

CVE-2014-4235

Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote authenticated users to affect integrity via unknown vectors.

3.5CVSS5.6AI score0.00441EPSS

CVE•added 2014/10/15 3:55 p.m.•46 views

CVE-2014-6472

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6539.

5CVSS5.8AI score0.00363EPSS

CVE•added 2015/01/21 2:59 p.m.•46 views

CVE-2014-6525

Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Templates.

3.5CVSS5.4AI score0.00139EPSS

CVE•added 2016/01/21 3:1 a.m.•46 views

CVE-2016-0526

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via unknown vectors related to Wireless Framework.

5CVSS5.1AI score0.00311EPSS

CVE•added 2018/04/19 2:29 a.m.•46 views

CVE-2018-2872

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker wit...

5.3CVSS4.4AI score0.00564EPSS

CVE•added 2019/01/16 7:30 p.m.•46 views

CVE-2019-2488

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with net...

5.3CVSS4.8AI score0.00821EPSS

CVE•added 2019/04/23 7:32 p.m.•46 views

CVE-2019-2551

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker ...

8.2CVSS8.1AI score0.01204EPSS

CVE•added 2013/04/17 12:19 p.m.•45 views

CVE-2013-1528

Unspecified vulnerability in the Oracle HRMS component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Payroll.

4.3CVSS5.9AI score0.00311EPSS

CVE•added 2015/01/21 6:59 p.m.•45 views

CVE-2015-0380

Unspecified vulnerability in the Oracle Telecommunications Billing Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to OA Based UI for Bill Su...

4.3CVSS5.9AI score0.00397EPSS

CVE•added 2015/07/16 10:59 a.m.•45 views

CVE-2015-2630

Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup.

4.3CVSS5.9AI score0.00311EPSS

CVE•added 2016/01/21 3:1 a.m.•45 views

CVE-2016-0556

Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Administration, a different vulnerability than CVE-2016-05...

5.5CVSS4.7AI score0.00164EPSS

CVE•added 2013/07/17 1:41 p.m.•44 views

CVE-2013-3778

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help.

4.3CVSS5.8AI score0.00524EPSS

CVE•added 2014/01/15 4:11 p.m.•44 views

CVE-2013-5874

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows local users to affect confidentiality via unknown vectors related to Logging.

1.7CVSS5.3AI score0.00081EPSS

CVE•added 2018/01/18 2:29 a.m.•44 views

CVE-2018-2656

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netw...

9.1CVSS8.2AI score0.02197EPSS

CVE•added 2018/07/18 1:29 p.m.•44 views

CVE-2018-2934

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS4.7AI score0.0041EPSS

CVE•added 2011/01/19 4:0 p.m.•43 views

CVE-2010-3589

Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.

4CVSS5.7AI score0.00394EPSS

CVE•added 2011/04/20 3:14 a.m.•43 views

CVE-2011-0791

Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export.

4.3CVSS5.8AI score0.00321EPSS

CVE•added 2013/01/17 1:55 a.m.•43 views

CVE-2012-3190

Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity, related to UWQ Server Issues.

6.4CVSS6.1AI score0.00397EPSS

CVE•added 2013/07/17 1:41 p.m.•43 views

CVE-2013-3747

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Client System Analyzer.

4CVSS5.2AI score0.00191EPSS

CVE•added 2014/10/15 10:55 p.m.•43 views

CVE-2014-6523

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to REST Interface.

4CVSS5.2AI score0.00215EPSS

CVE•added 2014/10/15 10:55 p.m.•43 views

CVE-2014-6539

4.3CVSS5.8AI score0.00363EPSS

CVE•added 2015/01/21 6:59 p.m.•43 views

CVE-2015-0404

4.3CVSS5.8AI score0.00397EPSS

CVE•added 2015/07/16 11:0 a.m.•43 views

CVE-2015-4728

Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation.

4CVSS5.2AI score0.00169EPSS

CVE•added 2015/10/21 11:59 p.m.•43 views

CVE-2015-4851

Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input. NOTE: the previous information is from the October 2015 C...

6.8CVSS6.2AI score0.01418EPSS

CVE•added 2015/10/21 11:59 p.m.•43 views

CVE-2015-4865

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J.

2.1CVSS5.2AI score0.00169EPSS

Total number of security vulnerabilities133