E Business Suite

CVEs (455)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-10184	Oracle Corporation Field Service	Med	0.35	5.3	0.02		Aug 8, 2017	Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3515	Oracle Corporation User Management	Med	0.35	5.4	0.01		Apr 24, 2017	Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2016-5583	Oracle Corporation One To One Fulfillment	Med	0.35	5.3	0.02		Oct 25, 2016	Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5575	Oracle Corporation Common Applications	Med	0.35	5.3	0.02		Oct 25, 2016	Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.
CVE-2016-5532	Oracle Corporation Shipping Execution	Med	0.35	5.3	0.03		Oct 25, 2016	Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.
CVE-2016-3549	Oracle Corporation Secure Enterprise Search	Med	0.35	5.3	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine.
CVE-2016-3548	Oracle Corporation Marketing	Med	0.35	5.3	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral.
CVE-2016-3545	Oracle Corporation Application Object Library	Med	0.35	5.3	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.
CVE-2016-3524	Oracle Corporation E Business Suite	Med	0.35	5.4	0.01		Jul 21, 2016	Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.
CVE-2016-3520	Oracle Corporation E Business Suite	Med	0.32	4.9	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality via vectors related to AOL Diagnostic tests.
CVE-2018-2635	Oracle Corporation Application Object Library	Med	0.31	4.8	0.01		Jan 18, 2018	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2016-3559	Oracle Corporation Email Center	Med	0.31	4.7	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than…
CVE-2016-3534	Oracle Corporation Installed Base	Med	0.31	4.7	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the…
CVE-2016-3523	Oracle Corporation Web Applications Desktop Integrator	Med	0.31	4.7	0.02		Jul 21, 2016	Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Application Service.
CVE-2025-61882	Oracle Corporation Concurrent Processing		0.28	—	1.00	KEV	Oct 5, 2025	Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10387	Oracle Corporation CRM Technical Foundation	Med	0.28	4.3	0.01		Oct 19, 2017	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10175	Oracle Corporation Isupport	Med	0.28	4.3	0.01		Aug 8, 2017	Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2016-5596	Oracle Corporation CRM Technical Foundation	Med	0.28	4.3	0.02		Oct 25, 2016	Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2022-21500	Oracle Corporation E Business Suite		0.07	—	0.71		May 19, 2022	Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this…
CVE-2004-1364	Oracle Corporation Oracle8i		0.04	—	0.14		Aug 4, 2004	Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

CVE-2017-10184MedAug 8, 2017
Oracle Corporation
Field Service
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless/WAP). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-3515MedApr 24, 2017
Oracle Corporation
User Management
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker…
CVE-2016-5583MedOct 25, 2016
Oracle Corporation
One To One Fulfillment
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle One-to-One Fulfillment component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect integrity via unknown vectors.
CVE-2016-5575MedOct 25, 2016
Oracle Corporation
Common Applications
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.
CVE-2016-5532MedOct 25, 2016
Oracle Corporation
Shipping Execution
risk 0.35cvss 5.3epss 0.03
Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events.
CVE-2016-3549MedJul 21, 2016
Oracle Corporation
Secure Enterprise Search
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle E-Business Suite Secure Enterprise Search component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Search Integration Engine.
CVE-2016-3548MedJul 21, 2016
Oracle Corporation
Marketing
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Marketing activity collateral.
CVE-2016-3545MedJul 21, 2016
Oracle Corporation
Application Object Library
risk 0.35cvss 5.3epss 0.02
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality via vectors related to Web based help screens.
CVE-2016-3524MedJul 21, 2016
Oracle Corporation
E Business Suite
risk 0.35cvss 5.4epss 0.01
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration.
CVE-2016-3520MedJul 21, 2016
Oracle Corporation
E Business Suite
risk 0.32cvss 4.9epss 0.02
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect confidentiality via vectors related to AOL Diagnostic tests.
CVE-2018-2635MedJan 18, 2018
Oracle Corporation
Application Object Library
risk 0.31cvss 4.8epss 0.01
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2016-3559MedJul 21, 2016
Oracle Corporation
Email Center
risk 0.31cvss 4.7epss 0.02
Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Email Center Agent Console, a different vulnerability than…
CVE-2016-3534MedJul 21, 2016
Oracle Corporation
Installed Base
risk 0.31cvss 4.7epss 0.02
Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the…
CVE-2016-3523MedJul 21, 2016
Oracle Corporation
Web Applications Desktop Integrator
risk 0.31cvss 4.7epss 0.02
Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Application Service.
CVE-2025-61882KEVOct 5, 2025
Oracle Corporation
Concurrent Processing
risk 0.28cvss —epss 1.00
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10387MedOct 19, 2017
Oracle Corporation
CRM Technical Foundation
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10175MedAug 8, 2017
Oracle Corporation
Isupport
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Profiles). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2016-5596MedOct 25, 2016
Oracle Corporation
CRM Technical Foundation
risk 0.28cvss 4.3epss 0.02
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2022-21500May 19, 2022
Oracle Corporation
E Business Suite
risk 0.07cvss —epss 0.71
Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this…
CVE-2004-1364Aug 4, 2004
Oracle Corporation
Oracle8i
risk 0.04cvss —epss 0.14
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.

Page 5 of 23