ES
Product
E-Business Suite
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch
Add E-Business Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1367 | – | Aug 4 | Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1366 | – | Aug 4 | Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1365 | – | Aug 4 | Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1364 | – | Aug 4 | Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1362 | – | Aug 4 | The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-0385 | – | Jun 1 | Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long… Affected: 11i |
| CVE-2003-1116 | – | Dec 31 | The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote… Affected: 10.7; 11.0; 11.1; 11.2; 11.3; 11.4; +4 more |
| CVE-2003-0633 | – | Aug 27 | Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive… Affected: 11.1; 11.2; 11.3; 11.4; 11.5; 11.6; +2 more |
| CVE-2003-0632 | – | Aug 27 | Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers… Affected: 11.1; 11.2; 11.3; 11.4; 11.5; 11.6; +2 more |
| CVE-2002-1882 | – | Dec 31 | Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack… Affected: 11.1; 11.2; 11.3; 11.4; 11.5; 11.6 |
| CVE-2002-1666 | – | Dec 31 | Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL Affected: 11.1; 11.2; 11.3; 11.4; 11.5; 11.6 |
| CVE-2001-0528 | – | Aug 14 | Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext… Affected: 11i |