Login Request a demo
ES
Product
E-Business Suite
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities462In the news6Timeline
Severity mix
Critical 9High 105Medium 72Low 7
Severity
All severities462Critical9High105Medium72Low7
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add E-Business Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-3402
–
2%
Oct 22
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect…
Affected: 11.5.10.2; 12.0.6; 12.1.1
CVE-2009-3408
–
2%
Oct 22
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to affect confidentiality, integrity, and…
Affected: 11.5.10
CVE-2009-3401
–
0%
Oct 22
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows local users to affect…
Affected: 11.5.10.2; 12.0.6; 12.1.1
CVE-2009-3400
–
2%
Oct 22
Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote authenticated users to affect…
Affected: 11.5.10.2; 12.0.6; 12.1.1
CVE-2009-3397
–
2%
Oct 22
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote attackers to affect confidentiality via…
Affected: 12.0.6; 12.1.1
CVE-2009-3395
–
3%
Oct 22
Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unknown vectors
Affected: 19.3.2
CVE-2009-3393
–
2%
Oct 22
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors
Affected: 11.5.10.2
CVE-2009-3392
–
3%
Oct 22
Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attackers to affect confidentiality, integrity,…
Affected: 6.1.0.0
CVE-2008-7238
–
2%
Sep 14
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile…
Affected: 12.0.3
CVE-2008-7235
–
5%
Sep 14
Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown…
Affected: 12.0.3
CVE-2009-1983
–
1%
Jul 14
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors
Affected: 11.5.10.2; 12.0.6; 12.1
CVE-2009-1982
–
1%
Jul 14
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown…
Affected: 11.5.10.2; 12.0.6
CVE-2009-1980
–
1%
Jul 14
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect…
Affected: 11.5.10.2; 12.0.6; 12.1
CVE-2009-1986
–
1%
Jul 14
Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors
Affected: 11.5.10.2
CVE-2009-1984
–
0%
Jul 14
Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and…
Affected: 11.5.10.2; 12.0.6; 12.1
CVE-2009-0999
–
2%
Apr 15
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and…
Affected: 12.0.6
CVE-2009-0995
–
1%
Apr 15
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown…
Affected: 11i10cu2
CVE-2009-1000
–
2%
Apr 15
The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which…
Affected: 11i10cu2; 12.0.6
CVE-2008-5458
–
1%
Jan 14
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality…
Affected: 11.5
CVE-2008-5450
–
0%
Jan 14
Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local users to affect confidentiality…
Affected: 11.5
CVE-2008-5446
–
1%
Jan 14
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect…
Affected: 11.5
CVE-2008-3998
–
1%
Oct 14
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown…
Affected: 12.0.4
CVE-2008-3993
–
1%
Oct 14
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authenticated users to affect integrity via…
Affected: 10.2; 11.5; 12.0.4
CVE-2008-3988
–
1%
Oct 14
Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect confidentiality via unknown vectors
Affected: 10.2; 11.5; 12.0.4
CVE-2008-3985
–
1%
Oct 14
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to affect confidentiality via unknown…
Affected: 12.0.4
CVE-2008-2619
–
1%
Oct 14
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote…
Affected: 11.5.10.2
CVE-2008-2610
–
1%
Jul 15
Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors
Affected: 12.0.4
CVE-2008-2606
–
1%
Jul 15
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a…
Affected: 12.0.4
CVE-2008-2601
–
1%
Jul 15
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors
Affected: 12.0.4
CVE-2008-2596
–
1%
Jul 15
Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors
Affected: 12.0.3
CVE-2008-2586
–
1%
Jul 15
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a…
Affected: 12.0.4
CVE-2008-2585
–
1%
Jul 15
Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors
Affected: 12.0.4
CVE-2008-1826
–
2%
Apr 16
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pricing, aka (1) APP01 and (2) APP10; and…
Affected: 11.5.10.2
CVE-2008-0340
–
3%
Jan 17
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the (1)…
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0349
–
3%
Jan 17
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack…
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0348
–
3%
Jan 17
Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact…
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0347
–
3%
Jan 17
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and…
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0346
–
3%
Jan 17
Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka…
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0345
–
3%
Jan 17
Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0344
–
3%
Jan 17
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2008-0343
–
3%
Jan 17
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06
Affected: 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1; 12.0.2; +1 more
CVE-2007-5766
–
1%
Nov 8
SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors
Affected: 11i; 12
CVE-2007-5529
–
2%
Oct 17
Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote…
Affected: 11.5.10.2
CVE-2007-5528
–
2%
Oct 17
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector Human Resources (APP03) and (2) Quoting…
Affected: 12.0.2
CVE-2007-5527
–
2%
Oct 17
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component…
Affected: 11.5.10.2
CVE-2007-3867
–
2%
Jul 18
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2) APPS05, and (3) APPS06 in (a) Oracle…
Affected: 11.5.10.2
CVE-2007-3866
–
3%
Jul 18
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b)…
Affected: 11.5.10.2; 12.0.1
CVE-2007-3865
–
2%
Jul 18
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01
Affected: 12.0.1
CVE-2007-3854
–
3%
Jul 18
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the…
Affected: 11.5.8; 11.5.9; 11.5.10; 11.5.10.2; 12.0.0; 12.0.1
CVE-2007-2170
–
4%
Apr 24
The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes
Affected: All versions, or not specified
Page 8 of 10 · 462 total
1…78910