Filtered by vendor Oracle
Subscriptions
Filtered by product E-business Suite
Subscriptions
Total
333 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2015-4849 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to cause a denial of service or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/IspPunchInServlet. | ||||
CVE-2015-4854 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on third-party claims that this issue is a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML via the Domain parameter in the CfgOCIReturn servlet. | ||||
CVE-2014-4213 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, and 12.2.3 allows remote attackers to affect integrity via unknown vectors. | ||||
CVE-2015-4762 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching. | ||||
CVE-2014-6472 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to LOV, a different vulnerability than CVE-2014-6539. | ||||
CVE-2015-4741 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup. | ||||
CVE-2014-6471 | 1 Oracle | 1 E-business Suite | 2025-04-12 | N/A |
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related to OAM Diagnostics. | ||||
CVE-2012-3138 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface. | ||||
CVE-2012-3139 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO). | ||||
CVE-2013-0390 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages. | ||||
CVE-2012-0078 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV). | ||||
CVE-2012-3148 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload. | ||||
CVE-2013-3778 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help. | ||||
CVE-2011-0791 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Data Export. | ||||
CVE-2010-2404 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle iRecruitment component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors related to Account. | ||||
CVE-2013-3777 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon. | ||||
CVE-2013-1524 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments. | ||||
CVE-2013-1517 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Diagnostics. | ||||
CVE-2013-0397 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics. | ||||
CVE-2013-0382 | 1 Oracle | 1 E-business Suite | 2025-04-11 | N/A |
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Campaign Management. |