ES
Product
E-Business Suite
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch
Add E-Business Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46817 In wildKEV | 9.8 | May 28 | Oracle E-Business Suite Improper Privilege Management Vulnerability Affected: 12.2.3 through 12.2.15 |
| CVE-2025-61882 RansomwareIn wildKEV | 9.8 | Oct 5 | Oracle E-Business Suite Unspecified Vulnerability Affected: All versions, or not specified |
| CVE-2022-21587 RansomwareIn wildKEV | 9.8 | Oct 18 | Oracle E-Business Suite Unspecified Vulnerability Affected: 12.2.3 through 12.2.11 |
| CVE-2025-61884 RansomwareIn wildKEV | 7.5 | Oct 12 | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Affected: All versions, or not specified |
| CVE-2025-30727 | 9.8 | Apr 15 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module) Affected: 12.2.3 through 12.2.14 |
| CVE-2004-1363 | 9.8 | Aug 4 | Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more |
| CVE-2026-46819 | 9.1 | May 28 | Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2019-2453 | 9.1 | Jan 16 | Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Management Plan) Affected: 12.1.1; 12.1.2; 12.1.3 |
| CVE-2019-2489 | 9.1 | Jan 16 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2018-2656 | 9.1 | Jan 18 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2026-83479 | 8.8 | Sep 15 | Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.14 through 12.2.15 |
| CVE-2026-83456 | 8.8 | Sep 15 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-70813 | 8.8 | Aug 18 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-70812 | 8.8 | Aug 18 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61319 | 8.8 | Aug 18 | Vulnerability in the Oracle U.S Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61320 | 8.8 | Jul 21 | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.8 through 12.2.15 |
| CVE-2026-60952 | 8.8 | Jul 21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60932 | 8.8 | Jul 21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60924 | 8.8 | Jul 21 | Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60681 | 8.8 | Jul 21 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60678 | 8.8 | Jul 21 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-46837 | 8.8 | May 28 | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security) Affected: 12.2.9 through 12.2.15 |
| CVE-2026-46827 | 8.8 | May 28 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-46826 | 8.8 | May 28 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-70807 | 8.5 | Aug 18 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62513 | 8.5 | Jul 21 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-47033 | 8.5 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60677 | 8.4 | Jul 21 | Vulnerability in the Oracle Common Application Components product of Oracle E-Business Suite (component: Oracle Common Modules) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83438 | 8.2 | Sep 15 | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61101 | 8.2 | Jul 21 | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60810 | 8.2 | Jul 21 | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-Business Suite (component: Collaboration History) Affected: 12.2.3 through 12.2.15 |
| CVE-2019-2551 | 8.2 | Apr 23 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2470 | 8.2 | Jan 16 | Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Detail) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2497 | 8.2 | Jan 16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2019-2440 | 8.2 | Jan 16 | Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2498 | 8.2 | Jan 16 | Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2400 | 8.2 | Jan 16 | Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2026-83457 | 8.1 | Sep 15 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83455 | 8.1 | Sep 15 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83432 | 8.1 | Sep 15 | Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83429 | 8.1 | Sep 15 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-83428 | 8.1 | Sep 15 | Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-70814 | 8.1 | Aug 18 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62514 | 8.1 | Jul 21 | Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61338 | 8.1 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61031 | 8.1 | Jul 21 | Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61005 | 8.1 | Jul 21 | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61004 | 8.1 | Jul 21 | Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60982 | 8.1 | Jul 21 | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60966 | 8.1 | Jul 21 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing) Affected: 12.2.3 through 12.2.15 |