ES
Product
E-Business Suite
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch
Add E-Business Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60957 | 5.4 | Jul 21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60571 | 5.4 | Jul 21 | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business Suite (component: Installation) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60310 | 5.4 | Jul 21 | Vulnerability in the Oracle Performance Management product of Oracle E-Business Suite (component: Appraisals) Affected: 12.2.3 through 12.2.15 |
| CVE-2025-50090 | 5.4 | Jul 15 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.14 |
| CVE-2023-21847 | 5.4 | Jan 18 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download) Affected: 12.2.3 through 12.2.12 |
| CVE-2017-3515 | 5.4 | Apr 24 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6 |
| CVE-2016-3524 | 5.4 | Jul 21 | Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect… Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2026-62517 | 5.3 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-62490 | 5.3 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2019-2488 | 5.3 | Jan 16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2018-2934 | 5.3 | Jul 18 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload) Affected: 12.1.3 |
| CVE-2018-2873 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2872 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2867 | 5.3 | Apr 19 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7 |
| CVE-2018-2866 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2865 | 5.3 | Apr 19 | Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more |
| CVE-2018-2864 | 5.3 | Apr 19 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7 |
| CVE-2026-62486 | 5.0 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2018-2684 | 4.9 | Jan 18 | Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Registration Process) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7 |
| CVE-2016-3520 | 4.9 | Jul 21 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote administrators to affect… Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2024-21148 | 4.8 | Jul 16 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization) Affected: 12.2.3 through 12.2.13 |
| CVE-2018-2635 | 4.8 | Jan 18 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Login) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7 |
| CVE-2026-61044 | 4.7 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2019-2485 | 4.7 | Jan 16 | Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2491 | 4.7 | Jan 16 | Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2496 | 4.7 | Jan 16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2019-2492 | 4.7 | Jan 16 | Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2019-2396 | 4.7 | Jan 16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages) Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more |
| CVE-2026-61316 | 4.3 | Jul 21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61315 | 4.3 | Jul 21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61292 | 4.3 | Jul 21 | Vulnerability in the Oracle U.S Affected: 12.2.3 through 12.2.15 |
| CVE-2023-22004 | 4.3 | Jul 18 | Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration) Affected: 12.2.3 through 12.2.12 |
| CVE-2019-2546 | 4.3 | Jan 16 | Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions) Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +3 more |
| CVE-2018-2874 | 4.3 | Apr 19 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging) Affected: 12.1.3 |
| CVE-2026-62489 | 4.2 | Jul 21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60938 | 4.1 | Jul 21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60847 | 3.4 | Jul 21 | Vulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61048 | 3.1 | Jul 21 | Vulnerability in the Oracle Inventory Optimization product of Oracle E-Business Suite (component: User Interface) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60937 | 3.1 | Jul 21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60936 | 3.1 | Jul 21 | Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-60804 | 2.0 | Jul 21 | Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61303 | 1.9 | Jul 21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2026-61047 | 1.9 | Jul 21 | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations) Affected: 12.2.3 through 12.2.15 |
| CVE-2016-0575 | – | Jan 21 | Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA… Affected: 11.5.10.2 |
| CVE-2016-0556 | – | Jan 21 | Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect… Affected: 11.5.10.2; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2016-0528 | – | Jan 21 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote… Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2016-0527 | – | Jan 21 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote… Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2016-0526 | – | Jan 21 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to… Affected: 11.5.10.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5 |
| CVE-2016-0524 | – | Jan 21 | Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via… Affected: 11.5.10.2 |
| CVE-2016-0521 | – | Jan 21 | Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to… Affected: 11.5.10.2 |
