E-Business Suite vulnerabilities | LiveThreat CVE Feed

Product

E-Business Suite

by Oracle · last CVE Sep 15, 2026

On CISA KEVExploited in the wildRansomware-linked

462

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities462 In the news6 Timeline

Severity mix

Critical 9High 105Medium 72Low 7

Severity

All severities462 Critical9 High105 Medium72 Low7

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add E-Business Suite to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-2866	5.3	2%	Apr 19	Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more
CVE-2018-2865	5.3	2%	Apr 19	Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more
CVE-2018-2864	5.3	2%	Apr 19	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7
CVE-2026-62486	5.0	0%	Jul 21	Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15
CVE-2018-2684	4.9	1%	Jan 18	Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Registration Process) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7
CVE-2016-3520	4.9	2%	Jul 21	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect… Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5
CVE-2024-21148	4.8	0%	Jul 16	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.13
CVE-2018-2635	4.8	1%	Jan 18	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7
CVE-2026-61044	4.7	0%	Jul 21	Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15
CVE-2019-2485	4.7	1%	Jan 16	Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more
CVE-2019-2491	4.7	1%	Jan 16	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more
CVE-2019-2496	4.7	1%	Jan 16	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more
CVE-2019-2492	4.7	1%	Jan 16	Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more
CVE-2019-2396	4.7	1%	Jan 16	Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more
CVE-2026-61316	4.3	0%	Jul 21	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI) Affected: 12.2.3 through 12.2.15
CVE-2026-61315	4.3	0%	Jul 21	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI) Affected: 12.2.3 through 12.2.15
CVE-2026-61292	4.3	0%	Jul 21	Vulnerability in the Oracle U.S Affected: 12.2.3 through 12.2.15
CVE-2023-22004	4.3	0%	Jul 18	Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration) Affected: 12.2.3 through 12.2.12
CVE-2019-2546	4.3	1%	Jan 16	Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more
CVE-2018-2874	4.3	0%	Apr 19	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging) Affected: 12.1.3
CVE-2026-62489	4.2	0%	Jul 21	Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15
CVE-2026-60938	4.1	0%	Jul 21	Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15