E Business Suite

CVEs (455)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-5595	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5587	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586	Oracle Corporation Email Center	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5557	Oracle Corporation Advanced Pricing	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5489	Oracle Corporation Istore	Hig	0.53	8.2	0.02	Oct 25, 2016	Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
CVE-2016-3536	Oracle Corporation Marketing	Hig	0.53	8.2	0.02	Jul 21, 2016	Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables. NOTE: the previous information is from the July 2016 CPU. Oracle…
CVE-2016-3439	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page.
CVE-2016-3437	Oracle Corporation Oracle CRM Wireless	Hig	0.53	8.2	0.02	Apr 21, 2016	Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page.
CVE-2026-46821	Oracle Corporation Oracle Financials Common Modules	Hig	0.50	7.7	0.00	May 28, 2026	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10130	Oracle Corporation Istore	Hig	0.50	7.6	0.01	Aug 8, 2017	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10332	Oracle Corporation Universal Work Queue	Hig	0.49	7.5	0.03	Oct 19, 2017	Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10328	Oracle Corporation Application Object Library	Hig	0.49	7.5	0.03	Oct 19, 2017	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10245	Oracle Corporation General Ledger	Hig	0.49	7.5	0.03	Aug 8, 2017	Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-10144	Oracle Corporation Applications Manager	Hig	0.49	7.5	0.03	Aug 8, 2017	Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-5562	Oracle Corporation Iprocurement	Hig	0.49	7.6	0.01	Oct 25, 2016	Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2026-46818	Oracle Corporation Payments	Hig	0.48	7.4	0.00	May 28, 2026	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle…

CVE-2016-5595HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5592.
CVE-2016-5593HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5592HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5595.
CVE-2016-5591HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5587…
CVE-2016-5589HigOct 25, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5587HigOct 25, 2016
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591…
CVE-2016-5586HigOct 25, 2016
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5557HigOct 25, 2016
Oracle Corporation
Advanced Pricing
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors.
CVE-2016-5489HigOct 25, 2016
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
CVE-2016-3536HigJul 21, 2016
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Deliverables. NOTE: the previous information is from the July 2016 CPU. Oracle…
CVE-2016-3439HigApr 21, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page.
CVE-2016-3437HigApr 21, 2016
Oracle Corporation
Oracle CRM Wireless
risk 0.53cvss 8.2epss 0.02
Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Person Address Page.
CVE-2026-46821HigMay 28, 2026
Oracle Corporation
Oracle Financials Common Modules
risk 0.50cvss 7.7epss 0.00
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10130HigAug 8, 2017
Oracle Corporation
Istore
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-10332HigOct 19, 2017
Oracle Corporation
Universal Work Queue
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10328HigOct 19, 2017
Oracle Corporation
Application Object Library
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10245HigAug 8, 2017
Oracle Corporation
General Ledger
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated…
CVE-2017-10144HigAug 8, 2017
Oracle Corporation
Applications Manager
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2016-5562HigOct 25, 2016
Oracle Corporation
Iprocurement
risk 0.49cvss 7.6epss 0.01
Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2026-46818HigMay 28, 2026
Oracle Corporation
Payments
risk 0.48cvss 7.4epss 0.00
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle…

Page 3 of 23