Vendor CVEs

Oracle Corporation

All CVEs

13,470 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-2258	Oracle Corporation Projects	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Projects product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2255	Oracle Corporation Service Contracts	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2254	Oracle Corporation Project Contracts	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Hold Management). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2252	Oracle Corporation Loans	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2251	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Data Source). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2250	Oracle Corporation VM Virtualbox	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2249	Oracle Corporation Landed Cost Management	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2021-2247	Oracle Corporation Advanced Collections	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2246	Oracle Corporation Universal Work Queue	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2021-2242	Oracle Corporation Outside In Technology	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2021-2241	Oracle Corporation Istore	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore.…
CVE-2021-2239	Oracle Corporation Time And Labor	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2238	Oracle Corporation Mes For Process Manufacturing	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2237	Oracle Corporation General Ledger	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2236	Oracle Corporation Oracle Financials Common Modules	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Advanced Global Intercompany). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2021-2235	Oracle Corporation Transportation Execution	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Install and Upgrade). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2233	Oracle Corporation Enterprise Asset Management	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2021-2231	Oracle Corporation Installed Base	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base.…
CVE-2021-2229	Oracle Corporation Depot Repair	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair.…
CVE-2021-2228	Oracle Corporation Incentive Compensation	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2227	Oracle Corporation Cash Management	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Bank Account Transfer). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2225	Oracle Corporation E Business Intelligence	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2224	Oracle Corporation Compensation Workbench	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2223	Oracle Corporation Receivables	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Receipts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2222	Oracle Corporation Bill Presentment Architecture	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite (component: Template Search). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2021-2210	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2206	Oracle Corporation Trade Management	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2199	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2197	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2195	Oracle Corporation Partner Management	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2021-2188	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2187	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2186	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2185	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2184	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2183	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2182	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2156	Oracle Corporation Customers Online	Hig	0.53	8.1	0.01	Apr 22, 2021	Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2150	Oracle Corporation Istore	Hig	0.53	8.2	0.01	Apr 22, 2021	Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-28165	Eclipse Jetty	Hig	0.53	7.5	0.54	Apr 1, 2021	In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
CVE-2020-36242	pyca Cryptography	Cri	0.53	9.1	0.07	Feb 7, 2021	In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
CVE-2021-2118	Oracle Corporation Marketing	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2107	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2106	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2105	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2104	Oracle Corporation Supply Chain	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2103	Oracle Corporation Supply Chain	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2102	Oracle Corporation Complex Maintenance\, Repair\, And Overhaul	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2099	Oracle Corporation CRM Technical Foundation	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2021-2098	Oracle Corporation Email Center	Hig	0.53	8.2	0.01	Jan 20, 2021	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

CVE-2021-2258HigApr 22, 2021
Oracle Corporation
Projects
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Projects product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2255HigApr 22, 2021
Oracle Corporation
Service Contracts
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2254HigApr 22, 2021
Oracle Corporation
Project Contracts
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Hold Management). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2252HigApr 22, 2021
Oracle Corporation
Loans
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2251HigApr 22, 2021
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Data Source). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2250HigApr 22, 2021
Oracle Corporation
VM Virtualbox
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox…
CVE-2021-2249HigApr 22, 2021
Oracle Corporation
Landed Cost Management
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2021-2247HigApr 22, 2021
Oracle Corporation
Advanced Collections
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2246HigApr 22, 2021
Oracle Corporation
Universal Work Queue
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2021-2242HigApr 22, 2021
Oracle Corporation
Outside In Technology
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2021-2241HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore.…
CVE-2021-2239HigApr 22, 2021
Oracle Corporation
Time And Labor
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2238HigApr 22, 2021
Oracle Corporation
Mes For Process Manufacturing
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2237HigApr 22, 2021
Oracle Corporation
General Ledger
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2236HigApr 22, 2021
Oracle Corporation
Oracle Financials Common Modules
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Advanced Global Intercompany). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2021-2235HigApr 22, 2021
Oracle Corporation
Transportation Execution
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Install and Upgrade). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2233HigApr 22, 2021
Oracle Corporation
Enterprise Asset Management
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP…
CVE-2021-2231HigApr 22, 2021
Oracle Corporation
Installed Base
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base.…
CVE-2021-2229HigApr 22, 2021
Oracle Corporation
Depot Repair
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair.…
CVE-2021-2228HigApr 22, 2021
Oracle Corporation
Incentive Compensation
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2227HigApr 22, 2021
Oracle Corporation
Cash Management
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Bank Account Transfer). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2225HigApr 22, 2021
Oracle Corporation
E Business Intelligence
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2021-2224HigApr 22, 2021
Oracle Corporation
Compensation Workbench
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2223HigApr 22, 2021
Oracle Corporation
Receivables
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Receipts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
CVE-2021-2222HigApr 22, 2021
Oracle Corporation
Bill Presentment Architecture
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite (component: Template Search). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2021-2210HigApr 22, 2021
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2206HigApr 22, 2021
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2199HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2197HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2195HigApr 22, 2021
Oracle Corporation
Partner Management
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2021-2188HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2187HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2186HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2185HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2184HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2183HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2182HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-2156HigApr 22, 2021
Oracle Corporation
Customers Online
risk 0.53cvss 8.1epss 0.01
Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2021-2150HigApr 22, 2021
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2021-28165HigApr 1, 2021
Eclipse
Jetty
risk 0.53cvss 7.5epss 0.54
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
CVE-2020-36242CriFeb 7, 2021
pyca
Cryptography
risk 0.53cvss 9.1epss 0.07
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
CVE-2021-2118HigJan 20, 2021
Oracle Corporation
Marketing
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2107HigJan 20, 2021
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2106HigJan 20, 2021
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2105HigJan 20, 2021
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2021-2104HigJan 20, 2021
Oracle Corporation
Supply Chain
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2103HigJan 20, 2021
Oracle Corporation
Supply Chain
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2102HigJan 20, 2021
Oracle Corporation
Complex Maintenance\, Repair\, And Overhaul
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2021-2099HigJan 20, 2021
Oracle Corporation
CRM Technical Foundation
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2021-2098HigJan 20, 2021
Oracle Corporation
Email Center
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

Page 41 of 270