Applications Framework vulnerabilities | LiveThreat CVE Feed

Product

Applications Framework

by Oracle · last CVE Jul 21, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities35 In the news0 Timeline

Severity mix

Critical 2High 12Medium 20Low 1

Severity

All severities35 Critical2 High12 Medium20 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Applications Framework to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-3447	6.9	1%	Apr 21	Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect… Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5
CVE-2024-21080	6.5	1%	Apr 16	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services) Affected: 12.2.9 through 12.2.13
CVE-2022-21636	6.5	1%	Oct 18	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management) Affected: 12.2.6 through 12.2.11
CVE-2025-50071	6.4	0%	Jul 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities) Affected: 12.2.3 through 12.2.14
CVE-2023-22042	6.1	0%	Jul 18	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics) Affected: 12.2.3 through 12.3.12
CVE-2022-21468	6.1	1%	Apr 19	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups) Affected: 12.2.4 through 12.2.11
CVE-2025-30718	5.4	0%	Apr 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload) Affected: 12.2.3 through 12.2.14
CVE-2025-30711	5.4	0%	Apr 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload) Affected: 12.2.3 through 12.2.14
CVE-2022-21477	5.4	1%	Apr 19	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload) Affected: 12.2.6 through 12.2.11
CVE-2017-3528	5.4	15%	Apr 24	Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6
CVE-2021-2477	5.3	1%	Oct 20	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management) Affected: 12.2.3 through 12.2.10; 12.1.3
CVE-2020-2866	5.3	1%	Apr 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload) Affected: 12.2.5 through 12.2.9
CVE-2020-2666	5.3	1%	Jan 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload) Affected: 12.2.5 through 12.2.9
CVE-2026-34298	4.7	0%	Apr 21	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.9 through 12.2.15
CVE-2020-14746	4.7	1%	Oct 21	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows) Affected: 12.2.3 through 12.2.10; 12.1.3
CVE-2020-2566	4.7	1%	Jan 15	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload) Affected: 12.2.3 through 12.2.9; 12.1.3
CVE-2026-60684	4.6	0%	Jul 21	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments) Affected: 12.2.3 through 12.2.15
CVE-2025-53071	4.3	0%	Oct 21	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments) Affected: 12.2.3 through 12.2.14
CVE-2025-53064	4.3	0%	Oct 21	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.14
CVE-2018-2971	4.3	1%	Oct 17	Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7