CVE-2021-2290

CVE-2021-2290 affects Oracle E-Business Suite Oracle Engineering Change Management; affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privileged, network-accessible attacker over HTTP to unauthorizedly create, delete, or modify data, or gain access to all Oracle Engin...

CVE-2021-2405

CVE-2021-2405 affects Oracle E-Business Suite, specifically the Oracle Engineering component (Change Management). Affected versions are 12.2.3–12.2.10. The vulnerability allows a low-privilege, unauthenticated attacker with HTTP network access to compromise Oracle Engineering, potentially causing...