CVE-2019-10086

CVE-2019-10086 affects Apache Commons BeanUtils 1.9.2, where a BeanIntrospector addition could suppress access to the classloader via the class property on Java objects. The issue stems from not applying the suppression by default in PropertyUtilsBean, enabling potential risk across affected depl...

CVE-2020-6950

Summary of CVE-2020-6950 (Eclipse Mojarra Local File Read) The Nuclei template confirms a directory traversal vulnerability in Eclipse Mojarra before 2.3.14 that allows reading arbitrary files via the loc or con parameter. Affected component is Mojarra (JavaServer Faces) in versions prior to 2.3....

CVE-2019-17091

CVE-2019-17091 affects Eclipse Mojarra (used in Mojarra for Eclipse EE4J) with an issue in faces/context/PartialViewContextImpl.java that allows Reflected XSS. Affected versions are Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20. The root cause is mishandling of...

CVE-2021-2239

The CVE-2021-2239 entry corresponds to a vulnerability in Oracle E-Business Suite Time and Labor (Timecard). Affected are Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, network-accessible attacker over HTTP to compromise Time and Labor, leadin...

CVE-2021-2415

CVE-2021-2415 affects Oracle E-Business Suite Time and Labor (Timecard). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privilege attacker who can access over the network via HTTP to compromise Time and Labor, potentially leading to unauthorized creation, d...

CVE-2026-62504

The CVE-2026-62504 entry concerns Oracle Time and Labor within Oracle E-Business Suite. Affected versions are 12.2.3–12.2.15, and the vulnerability affects the Internal Operations component. An attacker with low privileges who can reach the system over HTTP can potentially compromise Oracle Time ...

CVE-2026-62505

CVE-2026-62505 affects Oracle Time and Labor, a component of Oracle E-Business Suite, with impacted versions 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker able to reach Oracle Time and Labor over HTTP to compromise data, with the attack requiring human interaction. Potentia...

CVE-2026-62507

CVE-2026-62507 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP to compromise data integrity, enabling unauthorized creation, deletion or modificati...

CVE-2026-60951

CVE-2026-60951 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). A low-privilege, network-access vulnerability via HTTP can lead to unauthorized creation, deletion or modification of critical data or full data access in Oracle Time and Labor. Documents indicate CVSS v3.1 ...

CVE-2026-62503

CVE-2026-62503 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). The vulnerability involves the Internal Operations component and is exploitable by a high-privilege attacker over HTTP with network access, enabling unauthorized create/delete/modify of data and partial deni...

CVE-2026-62508

CVE-2026-62508 affects Oracle Time and Labor (Internal Operations) in Oracle E-Business Suite, versions 12.2.3–12.2.15. The flaw can be exploited by a low-privileged attacker with network access via HTTP to cause a partial denial of service in Oracle Time and Labor. The CVSS 3.1 base score is 3.1...

CVE-2026-62494

The CVE-2026-62494 entry affects Oracle Time and Labor in Oracle E-Business Suite, specifically the Internal Operations component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP and can lead to unauthorized creatio...