VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk
  • CVE-2021-35536HigOct 20, 2021
    Oracle Corporation
    Deal Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2485HigOct 20, 2021
    Oracle Corporation
    Trade Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade…

  • CVE-2021-2484HigOct 20, 2021
    Oracle Corporation
    Operations Intelligence
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…

  • CVE-2021-2483HigOct 20, 2021
    Oracle Corporation
    Content Manager
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content Item Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2482HigOct 20, 2021
    Oracle Corporation
    Payables
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2474HigOct 20, 2021
    Oracle Corporation
    Web Analytics
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Web…

  • CVE-2021-39135HigAug 31, 2021
    Npmjs
    Arborist
    risk 0.53cvss 8.2epss 0.01

    `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed…

  • CVE-2021-39134HigAug 31, 2021
    Npmjs
    Arborist
    risk 0.53cvss 8.2epss 0.01

    `@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed…

  • CVE-2021-2436HigJul 21, 2021
    Oracle Corporation
    Common Applications
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2021-2435HigJul 21, 2021
    Oracle Corporation
    Essbase Analytic Provider Services
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase (component: JAPI). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic…

  • CVE-2021-2434HigJul 21, 2021
    Oracle Corporation
    Web Applications Desktop Integrator
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2021-2428HigJul 21, 2021
    Oracle Corporation
    Coherence
    risk 0.53cvss 8.1epss 0.02

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3,…

  • CVE-2021-2415HigJul 21, 2021
    Oracle Corporation
    Time And Labor
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2409HigJul 21, 2021
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…

  • CVE-2021-2406HigJul 21, 2021
    Oracle Corporation
    Collaborative Planning
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2405HigJul 21, 2021
    Oracle Corporation
    Engineering
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2398HigJul 21, 2021
    Oracle Corporation
    Advanced Outbound Telephony
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Region Mapping). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2021-2395HigJul 21, 2021
    Oracle Corporation
    Hospitality Reporting And Analytics
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: iCare, Configuration). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2021-2393HigJul 21, 2021
    Oracle Corporation
    E-Records
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle E-Records product of Oracle E-Business Suite (component: E-signatures). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2365HigJul 21, 2021
    Oracle Corporation
    Human Resources
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: People Management). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2364HigJul 21, 2021
    Oracle Corporation
    Isupplier Portal
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2363HigJul 21, 2021
    Oracle Corporation
    Public Sector Financials
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2021-2362HigJul 21, 2021
    Oracle Corporation
    Field Service
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field…

  • CVE-2021-2361HigJul 21, 2021
    Oracle Corporation
    Advanced Inbound Telephony
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: SDK client integration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2021-2360HigJul 21, 2021
    Oracle Corporation
    Approvals Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite (component: AME Page rendering). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2359HigJul 21, 2021
    Oracle Corporation
    Marketing
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2021-31618HigJun 15, 2021
    Apache
    HTTP Server
    risk 0.53cvss 7.5epss 0.51

    Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a…

  • CVE-2020-13950HigJun 10, 2021
    Apache
    HTTP Server
    risk 0.53cvss 7.5epss 0.49

    Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

  • CVE-2021-26291CriApr 23, 2021
    Apache
    Maven
    risk 0.53cvss 9.1epss 0.09

    Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to…

  • CVE-2021-2316HigApr 22, 2021
    Oracle Corporation
    HRMS (France)
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS…

  • CVE-2021-2314HigApr 22, 2021
    Oracle Corporation
    Application Object Library
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2295HigApr 22, 2021
    Oracle Corporation
    Concurrent Processing
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2021-2292HigApr 22, 2021
    Oracle Corporation
    Document Management And Collaboration
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Document Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2021-2290HigApr 22, 2021
    Oracle Corporation
    Engineering
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2288HigApr 22, 2021
    Oracle Corporation
    Bills Of Material
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2279HigApr 22, 2021
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.1epss 0.03

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM…

  • CVE-2021-2276HigApr 22, 2021
    Oracle Corporation
    iSetup
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2021-2274HigApr 22, 2021
    Oracle Corporation
    E Business Tax
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2273HigApr 22, 2021
    Oracle Corporation
    Legal Entity Configurator
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite (component: Create Contracts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2272HigApr 22, 2021
    Oracle Corporation
    Subledger Accounting
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inquiries). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2271HigApr 22, 2021
    Oracle Corporation
    Work In Process
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Resource Exceptions). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2021-2270HigApr 22, 2021
    Oracle Corporation
    Site Hub
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Sites). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub.…

  • CVE-2021-2269HigApr 22, 2021
    Oracle Corporation
    Advanced Pricing
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price Book). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced…

  • CVE-2021-2268HigApr 22, 2021
    Oracle Corporation
    Quoting
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting.…

  • CVE-2021-2267HigApr 22, 2021
    Oracle Corporation
    Labor Distribution
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2021-2263HigApr 22, 2021
    Oracle Corporation
    Oracle Sourcing
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2021-2262HigApr 22, 2021
    Oracle Corporation
    Purchasing
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Purchasing.…

  • CVE-2021-2261HigApr 22, 2021
    Oracle Corporation
    Lease And Finance Management
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2021-2260HigApr 22, 2021
    Oracle Corporation
    Human Resources
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human…

  • CVE-2021-2259HigApr 22, 2021
    Oracle Corporation
    Payables
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: India Localization, Results). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via…

Page 40 of 270