ES
Product
E-Business Suite
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wildRansomware-linked
462
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 105Medium 72Low 7
Watch

Add E-Business Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46817
In wildKEV
9.8
12%
May 28
Oracle E-Business Suite Improper Privilege Management Vulnerability
Affected: 12.2.3 through 12.2.15
CVE-2025-61882
RansomwareIn wildKEV
9.8
100%
Oct 5
Oracle E-Business Suite Unspecified Vulnerability
Affected: All versions, or not specified
CVE-2022-21587
RansomwareIn wildKEV
9.8
98%
Oct 18
Oracle E-Business Suite Unspecified Vulnerability
Affected: 12.2.3 through 12.2.11
CVE-2025-30727
9.8
1%
Apr 15
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)
Affected: 12.2.3 through 12.2.14
CVE-2004-1363
9.8
9%
Aug 4
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.5.5; 11.5.6; +3 more
CVE-2026-46819
9.1
0%
May 28
Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations)
Affected: 12.2.3 through 12.2.15
CVE-2019-2453
9.1
2%
Jan 16
Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Management Plan)
Affected: 12.1.1; 12.1.2; 12.1.3
CVE-2019-2489
9.1
2%
Jan 16
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query)
Affected: 12.1.3; 12.2.3; 12.2.4; 12.2.5; 12.2.6; 12.2.7; +1 more
CVE-2018-2656
9.1
2%
Jan 18
Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Data Manager Server)
Affected: 12.1.1; 12.1.2; 12.1.3; 12.2.3; 12.2.4; 12.2.5; +2 more
Showing 9