Oracle E-Business Suite vulnerabilities

Vulnerability in Oracle Customers Online (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Time and Labor (versions 12.2.3-12.2.15). Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Time and Labor of Oracle E-Business Suite (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit flaw allows a high-privileged attacker with network access via HTTP to unauthorizedly access critical data and modify some data, potentially affecting other products.

Oracle Process Manufacturing Systems (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Vulnerability in Oracle Process Manufacturing Logistics (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Landed Cost Management (part of Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.

Oracle Advanced Collections (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Oracle Transportation Execution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

Vulnerability in Oracle HRMS (Ireland) product of Oracle E-Business Suite (component: Internal Operations) in versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle HRMS (Ireland) data. CVSS 3.1 Base Score 2.2 (Confidentiality impact).

Vulnerability in Oracle Service Contracts product of Oracle E-Business Suite. Requires a high-privileged attacker and user interaction, but can lead to unauthorized access to all data and unauthorized creation, deletion, or modification of critical data.

A vulnerability in Oracle Project Contracts (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.

Vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A high-privileged attacker with local access can modify critical data.

A vulnerability in Oracle Labor Distribution (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.

Vulnerability in Oracle Labor Distribution (Oracle E-Business Suite) versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS).

Oracle Labor Distribution (Oracle E-Business Suite, component: Internal Operations) versions 12.2.3-12.2.15 have an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can take over the system. CVSS 8.8.

A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.

A vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly update, insert, or delete data. The attack is difficult to exploit.

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected: 12.2.3-12.2.15. Easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks can result in takeover. CVSS 7.2 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Public Sector Payroll product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Public Sector Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

A vulnerability in Oracle iSupplier Portal (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to unauthorizedly read a subset of data. The attack is difficult to exploit.

Vulnerability in Oracle Customer Care within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle iSupplier Portal (versions 12.2.3-12.2.15). Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.

Vulnerability in Oracle Shipping Execution product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Project Intelligence within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle HCM Configuration Workbench product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Rapid Implementation component.

Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

A vulnerability in Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, requires local access and low privileges. May lead to unauthorized data read access and partial denial of service.

Vulnerability in Oracle HRMS (Norway) (Norway Payroll component). A high-privileged attacker via HTTP can take over the system.

In Oracle Work in Process (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Internal Operations component. Difficult to exploit, allows a high-privileged attacker with local access to unauthorized read access to a subset of data. CVSS 1.9.

Vulnerability in Oracle Payroll within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Order Management within Oracle E-Business Suite (component: Product Diagnostic Tools). A low-privileged attacker with network access via HTTP can take over the system.

Oracle Advanced Pricing (part of Oracle E-Business Suite) versions 12.2.14-12.2.15 have a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and modify some data.

Vulnerability in Oracle Advanced Pricing within Oracle E-Business Suite (component: Pricing Installation). A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Mobile Application Server product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the server.

Vulnerability in Oracle Citizen Interaction Center (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Allows an authenticated attacker with high privileges and network access via HTTP to unauthorizedly create, delete, or modify critical data and access it.

Vulnerability in Oracle Price Protection Internal Operations component. A low-privileged attacker via HTTP can access critical data.

Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.

Vulnerability in Oracle iSupport Internal Operations component. A high-privileged attacker via HTTP can take over the system.

Vulnerability in Oracle iSupport (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and create, delete or modify it.

Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain complete access to all data in the Collaboration History component.

Vulnerability in Oracle Supply Chain Trading Connector product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Supply Chain Trading Connector (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable, allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it.

Vulnerability in Oracle iSetup of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Sales Offline within Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Receivables product of Oracle E-Business Suite. A high privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle Application Object Library product of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.

Vulnerability in Oracle Applications DBA (part of Oracle E-Business Suite, component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker with local access can gain full access to critical data, impacting other products.

Vulnerability in Oracle Cost Management of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.