CVE-2022-21250

Summary: CVE-2022-21250 affects Oracle E-Business Suite – Trade Management (GL Accounts). Affects 12.2.3–12.2.11. Attack requires network access via HTTP with low privileges and no user interaction. Successful exploits could lead to unauthorized creation, deletion or modification of data, or acce...

CVE-2021-2206

CVE-2021-2206 affects Oracle E-Business Suite, Oracle Trade Management component Quotes, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The flaw enables unauthenticated attackers with network access via HTTP to compromise Oracle Trade Management; attacks may yield unauthorized data acce...

CVE-2024-21074

CVE-2024-21074 affects Oracle E-Business Suite, Oracle Trade Management (Finance LOV) with affected versions 12.2.3–12.2.13. The issue allows an unauthenticated attacker, over HTTP, to access Oracle Trade Management data due to insufficient input validation (root cause). Impact is unauthorized ac...

CVE-2021-2210

The CVE-2021-2210 issue affects Oracle E‑Business Suite, specifically the Oracle Trade Management Quotes component. Affects versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to compromise Oracle Trade Management, with hu...

CVE-2020-14876

CVE-2020-14876 affects Oracle E-Business Suite – Trade Management (UI). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access via HTTP can compromise Trade Management, potentially creating, deleting or modifying data or gaining unauthorized data acce...

CVE-2024-21146

CVE-2024-21146 affects Oracle E-Business Suite, Oracle Trade Management, GL Accounts. Affected versions are 12.2.3–12.2.13. The issue is described as improper authorization in GL Accounts that can be exploited by a low-privileged, network-accessible attacker via HTTP to perform unauthorized creat...

CVE-2024-21073

CVE-2024-21073 affects Oracle E-Business Suite Oracle Trade Management, component Claim LOV. The issue arises from insufficient input validation in Claim LOV, allowing unauthenticated remote attacker over HTTP to access or compromise Oracle Trade Management, with impact on data confidentiality (p...

CVE-2024-21075

CVE-2024-21075 affects Oracle E-Business Suite Oracle Trade Management, Claim Line LOV, versions 12.2.3–12.2.13. The issue allows unauthenticated, network-accessible (HTTP) compromise of Oracle Trade Management with potential unauthorized data access. CVSS v3.1 base score 7.5 (Confidentiality imp...

CVE-2024-21076

Oracle E-Business Suite — Oracle Trade Management (Offer LOV) is affected in 12.2.3–12.2.13 due to insufficient input validation. An unauthenticated, network-access attacker can exploit via HTTP to gain unauthorized access to Oracle Trade Management data. The issue is described in external adviso...

CVE-2024-21077

The connected documents confirm a vulnerability in Oracle E-Business Suite’s Oracle Trade Management, specifically the GL Accounts LOV component, affecting 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can compromise Oracle Trade Management, potentially gaining unauthor...

CVE-2020-14808

CVE-2020-14808 affects Oracle E-Business Suite Trade Management (UI) on versions 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker can exploit over HTTP to access or modify data, with user interaction required. CVSS v3.1 base score 8.2 (C:H, I:L) indicating high confidentiality impact and lo...

CVE-2021-35554

CVE-2021-35554 affects Oracle E-Business Suite Trade Management (Quotes) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability permits an unauthenticated remote attacker (over HTTP) to read a subset of Oracle Trade Management data. There is no exploitation detail in the provi...

CVE-2019-2642

CVE-2019-2642 affects Oracle E-Business Suite, Trade Management component (User Interface). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8. The vulnerability is exploitable via HTTP with network access and requires user interaction from a person other th...

CVE-2020-14856

CVE-2020-14856 affects Oracle E-Business Suite Trade Management (UI). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Trade Management; exploitation requires user interaction. Impact can inclu...

CVE-2019-2641

This CVE refers to a vulnerability in Oracle E-Business Suite’s Oracle Trade Management (UI) component. Affected versions include 12.1.1, 12.1.2, 12.1.3, and 12.2.3–12.2.8. The issue is exploitable by an unauthenticated network attacker via HTTP, with user interaction required, potentially leadin...

CVE-2017-3446

CVE-2017-3446 affects Oracle E-Business Suite Trade Management (User Interface). Concretely, vulnerable are Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6; reported CVSSv3 base 8.2 (Network, User Interaction Required, Confidentiality/Integrity impacts)....

CVE-2020-14833

CVE-2020-14833 affects Oracle E-Business Suite Trade Management (User Interface). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP with network access and unauthenticated access, with user interaction required for exploitation, potentially leading...

CVE-2020-2821

The CVE-2020-2821 entry affects Oracle E-Business Suite, Trade Management (Budget) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management, with attacks requiring user interacti...

CVE-2020-2822

CVE-2020-2822 concerns Oracle E-Business Suite Oracle Trade Management (Claims) with affected versions 12.1.1–12.1.3. The vulnerability enables unauthenticated network access via HTTP to compromise Trade Management, requiring user interaction to trigger, and potentially yielding unauthorized acce...

CVE-2020-14665

CVE-2020-14665 affects Oracle E-Business Suite Trade Management (Invoice) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker over HTTP to create/modify/delete data in Oracle Trade Management, risking data confidentiality and integrity (CVS...

CVE-2020-14857

CVE-2020-14857 affects Oracle E-Business Suite Trade Management, specifically the User Interface component, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, per sources, may allow access to critical data and un...

CVE-2017-3444

CVE-2017-3444 affects Oracle E-Business Suite Trade Management UI in versions 12.1.1–12.2.6. It allows unauthenticated, network-access via HTTP access to compromise Trade Management; exploitation requires user interaction and can lead to unauthorized access to data or unauthorized updates across ...

CVE-2019-2643

CVE-2019-2643 affects Oracle E-Business Suite, specifically the Trade Management component (UI). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management; attacks requir...

CVE-2020-14834

CVE-2020-14834 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue is exploitable over HTTP by a remote attacker and can lead to unauthorized access or data manipulation in Oracle Trade Management data; CVSS v3.1 base score 8.2 ...

CVE-2018-3011

CVE-2018-3011 affects Oracle E-Business Suite Trade Management User Interface. Affected versions: 12.1.1–12.2.7. The vulnerability permits unauthenticated remote access via HTTP to compromise Trade Management and potentially other products, with attacks requiring user interaction. Consequences in...

CVE-2019-2640

CVE-2019-2640 concerns the Oracle E-Business Suite, specifically the Oracle Trade Management component (User Interface). Affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with HTTP access to compromise Trade Management, with human interaction...

CVE-2017-3445

CVE-2017-3445 describes a vulnerability in the Oracle E-Business Suite Trade Management UI. Affected are Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The issue allows an unauthenticated attacker who can reach the application over HTTP to compromise ...

CVE-2018-2991

CVE-2018-2991 affects Oracle E-Business Suite, specifically the Trade Management UI. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP and does not require authentication, with a prerequisite of user interaction; successful exploitation can grant unauthorized access ...

CVE-2018-3012

The CVE-2018-3012 entry concerns Oracle E-Business Suite’s Trade Management UI vulnerability affecting versions 12.1.1–12.2.7. The connected records indicate a vulnerability in the Oracle Trade Management component of E-Business Suite (UI subcomponent) that could be exploited by an unauthenticate...

CVE-2020-14851

CVE-2020-14851 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated network attacker can compromise Trade Management via HTTP; attacks require human interaction and may lead to unauthorized access to data and unauthorize...

CVE-2021-2485

CVE-2021-2485 affects Oracle E-Business Suite Trade Management (Quotes) with affected versions 12.1.1–12.1.3. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise data, potentially enabling unauthorized creation, deletion, or modification of critical data w...