CVE-2017-3284

CVE-2017-3284 affects Oracle E-Business Suite, specifically the Service Fulfillment Manager UI. Affected versions include 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Fulfillment Manager; attacks require human interacti...

CVE-2017-3285

CVE-2017-3285 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (User Interface). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Service Fulfillment Manager, wi...

CVE-2026-60942

The CVE-2026-60942 affects Oracle E-Business Suite’s Oracle Service Fulfillment Manager (Fulfillment Engine) in versions 12.2.3–12.2.15. It enables a low-privileged, network-authenticated attacker (HTTP) to potentially create/modify/delete critical data or access all data via the Fulfillment Mana...

CVE-2026-60943

The CVE-2026-60943 affects Oracle E-Business Suite, specifically the Oracle Service Fulfillment Manager component (Fulfillment Engine) in versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privilege attacker with network access over HTTP to take over the Oracle Service Fulfillme...