Oracle E-Business Suite vulnerabilities

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Process Manufacturing Systems. Successful attacks of this vulnerability can result in takeover of Oracle Process Manufacturing Systems. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Bills of Material of Oracle E-Business Suite, Web Services component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite, Self Service Benefits component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Sales for Handhelds of Oracle E-Business Suite, Outlook Sync Win 32 component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Proposals product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Workflow of Oracle E-Business Suite, Workflow Notification Mailer component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Marketing of Oracle E-Business Suite, Audience component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Product Hub of Oracle E-Business Suite, Role Based Security component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Product Hub of Oracle E-Business Suite, Item Catalog component. A low-privileged attacker via HTTP can modify, read data, and cause partial denial of service.

Vulnerability in Oracle Supply Chain Globalization (Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can perform unauthorized update, insert, delete, read access and cause partial denial of service.

Vulnerability in Oracle HRMS (Republic of Korea) (Oracle E-Business Suite) versions 12.2.3-12.2.15. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and write access to some payroll data.

Vulnerability in Oracle E-Business Suite HRMS (Australia) Payroll component. A low-privileged attacker via HTTP can gain unauthorized access to critical data.

Vulnerability in Oracle Learning Management Import And Export component. A low-privileged attacker via HTTP can access critical data.

Vulnerability in Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll) in versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle HRMS (UK) data. CVSS 3.1 Base Score 2.2 (Confidentiality impact).

Vulnerability in Oracle Complex Maintenance, Repair and Overhaul (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. Attack may affect other products.

Vulnerability in Oracle HRMS (US) (Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, a low-privileged attacker via HTTP can gain unauthorized read access and cause partial denial of service.

Vulnerability in Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Affected versions 12.2.9-12.2.15. A low privileged attacker with network access via HTTP can compromise all data confidentiality and integrity.

Vulnerability in Oracle HRMS (US) product of Oracle E-Business Suite, component Internal Operations. Affects versions 12.2.3-12.2.15. A low-privileged attacker with local access can compromise the system, though exploitation is difficult.

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (UK). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HRMS (UK) accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle HRMS (UK). CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts).

Vulnerability in Oracle HRMS (UK) of Oracle E-Business Suite (component: Internal Operations) versions 12.2.8-12.2.15. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly access critical data, potentially affecting other products.

Vulnerability in Oracle Order Management (Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Order Management data.

Vulnerability in Oracle Applications DBA product (Oracle E-Business Suite) in ADPatch component. Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Self-Service Human Resources. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Install / Upgrade Issues). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engine). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Suite Secure Enterprise Search. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Inventory Optimization (Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS).

Vulnerability in Oracle Production Scheduling of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can perform unauthorized update, insert, or delete, gain unauthorized read access, and cause a partial denial of service (partial DOS).

Vulnerability in Oracle Loans (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle HRMS (Norway) versions 12.2.3-12.2.15. Easily exploitable by an authenticated attacker with high privileges, allowing unauthorized update, insert, delete, and read access to payroll data.

Vulnerability in Oracle Financials Common Country (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Process Manufacturing Product Development (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle iRecruitment (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Customers Online (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Time and Labor (versions 12.2.3-12.2.15). Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Time and Labor of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows a high-privileged attacker with network access via HTTP to unauthorizedly access critical data and modify some data, potentially affecting other products.

Oracle Process Manufacturing Systems (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Vulnerability in Oracle Process Manufacturing Logistics (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Landed Cost Management (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Oracle Advanced Collections (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Oracle Transportation Execution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Vulnerability in Oracle HRMS (Ireland) product of Oracle E-Business Suite (component: Internal Operations) in versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle HRMS (Ireland) data. CVSS 3.1 Base Score 2.2 (Confidentiality impact).

Vulnerability in Oracle Service Contracts product of Oracle E-Business Suite. Requires a high-privileged attacker and user interaction, but can lead to unauthorized access to all data and unauthorized creation, deletion, or modification of critical data.

A vulnerability in Oracle Project Contracts (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.

Vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A high-privileged attacker with local access can modify critical data.

A vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.

Vulnerability in Oracle Labor Distribution (Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS).

Oracle Labor Distribution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.