CVE-2017-3549

CVE-2017-3549 affects Oracle E-Business Suite (Scripting Administration) with an SQL injection in iesfootprint.jsp. Affected versions include 12.2.3 (and 12.1.1–12.1.3 and 12.2.3–12.2.6 per the April 2017 CPU). The vulnerability permits unauthenticated, network-based access via HTTP to read/modif...

CVE-2021-2029

CVE-2021-2029 affects Oracle E-Business Suite, specifically the Oracle Scripting component. The vulnerability impacts affected E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.8, and is exploitable by an unauthenticated attacker over HTTP with network access to compromise Oracle Scripting,...

CVE-2021-2091

CVE-2021-2091 affects Oracle E-Business Suite Oracle Scripting (Miscellaneous) and is documented across multiple sources. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The flaw allows an unauthenticated attacker who can reach Oracle Scripting over HTTP to compromise data; attacks may re...

CVE-2018-2997

CVE-2018-2997 affects Oracle E-Business Suite, specifically the Script Author subcomponent of Oracle Scripting. Affected versions are 12.1.1, 12.1.2 and 12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Scripting, with human interaction...

CVE-2020-2879

CVE-2020-2879 affects Oracle E-Business Suite, Oracle Scripting (component: Miscellaneous). Affected are versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Scripting, potentially leading to unauthorized...

CVE-2020-2817

CVE-2020-2817 affects Oracle E-Business Suite Oracle Scripting (component: Miscellaneous). Affected versions are 12.1.1–12.1.3. The vulnerability can be exploited over HTTP by an unauthenticated, network-accessible attacker and requires user interaction for successful exploitation, potentially le...

CVE-2026-70808

Oracle E-Business Suite Scripting (Internal Operations component), versions 12.2.3–12.2.15, is vulnerable to a HIGH-severity (CVSS 7.1) HTTP-based flaw exploitable by low-privilege attackers, enabling unauthorized read/write access to Scripting data. No exploitation details are provided. Remediat...

CVE-2026-21943

CVE-2026-21943 affects Oracle E-Business Suite Scripting Admin in versions 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise Oracle Scripting, with human interaction required. Impact includes unauthorized updates, inserts, deletes, and read access to Oracle S...

CVE-2026-70810

An unauthenticated, network-accessible HTTP vulnerability in Oracle E-Business Suite's Oracle Scripting product (component: Internal Operations) affects versions 12.2.3 through 12.2.15. CVSS 3.1 scores it HIGH (7.5) with full confidentiality impact. Successful exploitation allows attackers to acc...

CVE-2025-61753

CVE-2025-61753 affects Oracle E-Business Suite, Oracle Scripting (Miscellaneous) in versions 12.2.3–12.2.14. The Nessus entry confirms a network-accessible, unauthenticated HTTP vulnerability in Oracle Scripting that requires user interaction and can lead to unauthorized data updates/inserts/dele...

CVE-2026-60976

Oracle E-Business Suite Scripting (Internal Operations) is affected in versions 12.2.3-12.2.15. A low-privilege attacker with network HTTP access can exploit it (CVSS 8.8) to fully compromise the application. Oracle released the August 2026 Critical Patch Update addressing this; no in-the-wild ex...

CVE-2026-60979

CVE-2026-60979 affects Oracle E-Business Suite Oracle Scripting (Internal Operations) in versions 12.2.3–12.2.15. The vulnerability enables unauthenticated, network-accessible attackers (via HTTP) to compromise Oracle Scripting, with potential takeover and high impact on confidentiality, integrit...

CVE-2026-70809

Oracle E-Business Suite Scripting component (versions 12.2.3–12.2.15) has a network-exploitable vulnerability allowing low-privileged attackers to compromise data confidentiality/integrity and cause partial DoS. Oracle's August 2026 CPU advisory provides patch guidance. No exploitation evidence i...

CVE-2026-60978

CVE-2026-60978 affects Oracle Scripting (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Scripting, potentially enabling unauthorized creation, deletion, or modification...

CVE-2026-61263

CVE-2026-61263 affects Oracle E-Business Suite, Oracle Scripting Admin, in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessing attacker over HTTP to gain unauthorized read and write access to Oracle Scripting data, with impact on confidentiality and integrity (CVS...