Oracle

E-business Suite

337 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-22004

  • EPSS 0.4%
  • Veröffentlicht 18.07.2023 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:44:05

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with...

7.5

CVE-2023-21849

  • EPSS 0.63%
  • Veröffentlicht 18.01.2023 00:15:14
  • Zuletzt bearbeitet 21.11.2024 07:43:46

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

5.4

CVE-2023-21847

  • EPSS 0.36%
  • Veröffentlicht 18.01.2023 00:15:13
  • Zuletzt bearbeitet 21.11.2024 07:43:46

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with n...

9.8

CVE-2022-21587

Warnung Exploit
  • EPSS 98.34%
  • Veröffentlicht 18.10.2022 21:15:10
  • Zuletzt bearbeitet 27.10.2025 17:09:18

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with net...

5

CVE-2022-21500

  • EPSS 70.59%
  • Veröffentlicht 20.05.2022 00:15:07
  • Zuletzt bearbeitet 21.11.2024 06:44:50

Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite....

5.9

CVE-2021-45105

Warnung
  • EPSS 100%
  • Veröffentlicht 18.12.2021 12:15:07
  • Zuletzt bearbeitet 29.05.2026 13:16:19

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service wh...

6.1

CVE-2019-10219

  • EPSS 2.17%
  • Veröffentlicht 08.11.2019 15:15:11
  • Zuletzt bearbeitet 07.07.2025 14:15:21

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

8.2

CVE-2019-2551

  • EPSS 1.29%
  • Veröffentlicht 23.04.2019 19:32:48
  • Zuletzt bearbeitet 21.11.2024 04:41:05

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitab...

4.3

CVE-2019-2546

  • EPSS 1.19%
  • Veröffentlicht 16.01.2019 19:30:36
  • Zuletzt bearbeitet 21.11.2024 04:41:05

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitab...

4.7

CVE-2019-2496

  • EPSS 1.24%
  • Veröffentlicht 16.01.2019 19:30:34
  • Zuletzt bearbeitet 21.11.2024 04:40:59

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability a...