Oracle E-Business Suite vulnerabilities

A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected: 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks can result in takeover. CVSS 7.2 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Public Sector Payroll product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Public Sector Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

A vulnerability in Oracle iSupplier Portal (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.

Vulnerability in Oracle Customer Care within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle iSupplier Portal (versions 12.2.3-12.2.15). Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Shipping Execution product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Project Intelligence within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Rapid Implementation component.

Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

A vulnerability in Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data read access and partial denial of service.

Vulnerability in Oracle HRMS (Norway) (Norway Payroll component). A high-privileged attacker via HTTP can take over the system.

In Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Internal Operations component. Difficult to exploit, allows a high-privileged attacker with local access to unauthorized read access to a subset of data. CVSS 1.9.

Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Order Management within Oracle E-Business Suite (component: Product Diagnostic Tools). A low-privileged attacker with network access via HTTP can take over the system.

Oracle Advanced Pricing (part of Oracle E-Business Suite) versions 12.2.14-12.2.15 have a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle Advanced Pricing within Oracle E-Business Suite (component: Pricing Installation). A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Mobile Application Server product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the server.

Vulnerability in Oracle Citizen Interaction Center (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.

Vulnerability in Oracle Price Protection Internal Operations component. A low-privileged attacker via HTTP can access critical data.

Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.

Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.

Vulnerability in Oracle iSupport (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and create, delete or modify it.

Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Collaboration History component.

Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Supply Chain Trading Connector (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it.

Vulnerability in Oracle iSetup of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Sales Offline within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Receivables product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Application Object Library product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Applications DBA (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain full access to critical data, impacting other products.

Vulnerability in Oracle Cost Management of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Scheduler product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle U.S. Federal Financials of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly access critical data, potentially affecting other products.

Vulnerability in Oracle Process Manufacturing Regulatory Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle General Ledger within Oracle E-Business Suite. A low-privileged attacker with network access via SOAP can take over the system.

Vulnerability in Oracle Applications Framework (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the framework.

Vulnerability in Oracle Project Foundation product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Affected version V16. A high privileged attacker with network access via HTTP can compromise critical data confidentiality and modify some data.

Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. Difficult to exploit, requires local access and low privileges. Successful attack may allow unauthorized data modification and partial denial of service.

Vulnerability in Oracle Project Manufacturing (part of Oracle E-Business Suite, component: PJM Command Center) version V16. A high-privileged attacker with local access can access critical data and modify some data.

Vulnerability in Oracle Cost Management Enterprise Command Center component. A high-privileged attacker via HTTP can access and modify critical data.

In Oracle Workflow (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Workflow Notification Mailer component. Difficult to exploit, allows a low-privileged attacker with local access to unauthorized update/insert/delete and partial denial of service. CVSS 3.6.

Vulnerability in Oracle Bills of Material (component: Bill Issues) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.

Vulnerability in Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Affected versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise all data confidentiality and integrity.

Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Security). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the application, leading to unauthorized creation, deletion, or modification of critical data and access to all application data.

Difficult to exploit vulnerability in Oracle Public Sector Financials (International) (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A high-privileged attacker via HTTP can take over the system, also affecting other products.

A vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) allows a low-privileged attacker with network access via HTTP to compromise data confidentiality and integrity. Successful attacks can result in unauthorized creation, deletion, or modification of critical data and unauthorized access to all Oracle Payroll data.