Unscored severity · published Dec 31, 2003
CVE-2003-1116
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote…
–
CVSS
4.4%
EPSS
No
On KEV
Description
The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-business Suite · Oracle
10.7; 11.0; 11.1; 11.2; 11.3; 11.4; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1116
marc.info
http://marc.info/?l=bugtraq&m=105012832418415&w=2
Patch
http://otn.oracle.com/deploy/security/pdf/2003alert53.pdf
Patch
http://securitytracker.com/id?1006550
www.integrigy.com
http://www.integrigy.com/alerts/FNDFS_Vulnerability.htm
Third Party Advisory
http://www.kb.cert.org/vuls/id/168873
Patch
http://www.securityfocus.com/bid/7325
More from E-business Suite
9.8
CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
9.8
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
9.8
CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
9.8
CVE-2025-30727
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)