ES
Product
E-Business Suite
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch
Add E-Business Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-2135 | – | Apr 24 | The ADI_BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND_DOCUMENTS table via the ADI_DISPLAY_REPORT… Affected: All versions, or not specified |
| CVE-2007-2130 | – | Apr 18 | Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite… Affected: All versions, or not specified |
| CVE-2007-2128 | – | Apr 18 | Unspecified vulnerability in the Sales Online component for Oracle E-Business Suite 11.5.10 has unknown impact and remote authenticated attack vectors, aka APPS08 Affected: 11.5.10 |
| CVE-2007-2127 | – | Apr 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via (1) Application Object Library (APPS04), iStore (2) APPS05… Affected: 12.0.0 |
| CVE-2007-2126 | – | Apr 18 | Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1) Common Applications (APPS01) and (2) iProcurement (APPS02) Affected: 11.5.10.2 |
| CVE-2007-0291 | – | Jan 17 | Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange, aka APPS02 Affected: 6.2.3 |
| CVE-2007-0290 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) Application Object Library… Affected: 11.5.10.2 |
| CVE-2007-0285 | – | Jan 17 | Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and Applications 11.5.10CU2… Affected: 11.5.1 |
| CVE-2007-0279 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka (1) OHS01,… Affected: 11.5.10.2 |
| CVE-2007-0275 | – | Jan 17 | Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component, as used in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3;… Affected: 11.5.10.2 |
| CVE-2006-5373 | – | Oct 18 | Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13 Affected: 11.5.10.1 |
| CVE-2006-5372 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for… Affected: 11.5.10; 11.5.10.1; 11.5.10.2 |
| CVE-2006-5371 | – | Oct 18 | Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07 Affected: 11.5.9 |
| CVE-2006-5370 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway… Affected: 11.5.10.2 |
| CVE-2006-5369 | – | Oct 18 | Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02 Affected: 11.5.10.2 |
| CVE-2006-5368 | – | Oct 18 | Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01 Affected: 6.2.4 |
| CVE-2006-5367 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle… Affected: 11.5.7; 11.5.8; 11.5.9; 11.5.10; 11.5.10.1; 11.5.10.2; +3 more |
| CVE-2006-5365 | – | Oct 18 | Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote… Affected: 11.5.10.2 |
| CVE-2006-5359 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications… Affected: 11.5.10.2 |
| CVE-2006-5355 | – | Oct 18 | Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle… Affected: 11.5.10.2 |
| CVE-2006-5354 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and… Affected: 11.5.10.2 |
| CVE-2006-5350 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08 Affected: 11.5.10.2 |
| CVE-2006-5348 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote… Affected: 11.5.10.2 |
| CVE-2006-5346 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact… Affected: 11.5.10.2 |
| CVE-2006-3717 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS03 and (2) APPS04 for… Affected: 11.5.9 |
| CVE-2006-3716 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS01 for Internet… Affected: 11.5.10.2 |
| CVE-2006-1884 | – | Apr 20 | Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka… Affected: 11.0; 11.5.1; 11.5.10; 11.5.10.1; 11.5.10.2 |
| CVE-2006-1883 | – | Apr 20 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka… Affected: 11.5.10.1 |
| CVE-2006-1882 | – | Apr 20 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln# (1) APPS03 in (a)… Affected: 11.5.10 |
| CVE-2006-1881 | – | Apr 20 | Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors Affected: 11.5.9 |
| CVE-2006-1880 | – | Apr 20 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln# (1) APPS01 in the (a)… Affected: 11.5.10.2 |
| CVE-2006-1037 | – | Mar 7 | SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors Affected: 11.5.3; 11.5.4; 11.5.5; 11.5.6; 11.5.7; 11.5.8; +4 more |
| CVE-2006-1035 | – | Mar 7 | Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors Affected: 11.5.3; 11.5.4; 11.5.5; 11.5.6; 11.5.7; 11.5.8; +4 more |
| CVE-2006-0552 | – | Feb 4 | Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +4 more |
| CVE-2006-0291 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and… Affected: 11.5.10 |
| CVE-2006-0290 | – | Jan 18 | Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business… Affected: 11.5.10 |
| CVE-2006-0289 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as… Affected: 11.5.10 |
| CVE-2006-0288 | – | Jan 18 | Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10 have unspecified… Affected: 11.5.10 |
| CVE-2006-0284 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack… Affected: 11.5.10 |
| CVE-2006-0279 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS13 and (2)… Affected: 4.3 |
| CVE-2006-0278 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS02 in the… Affected: 11.5.9 |
| CVE-2006-0277 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in… Affected: 11.5.10 |
| CVE-2005-3459 | – | Nov 2 | Unspecified vulnerability in Oracle E-Business Suite and Applications 4.5 up to 4.5.1 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS22 in Oracle… Affected: 12.0.0 |
| CVE-2005-3457 | – | Nov 2 | Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS08 in HRMS Affected: through 11.5.10; 11.0; 11.5; 11.5.1; 11.5.2; 11.5.3; +6 more |
| CVE-2005-3455 | – | Nov 2 | Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1)… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +4 more |
| CVE-2004-0543 | – | Aug 6 | Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1371 | – | Aug 4 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1370 | – | Aug 4 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1369 | – | Aug 4 | The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2004-1368 | – | Aug 4 | ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |