WaratekVRT Sign in

Oracle E-Business Suite Oracle Applications Framework CVEs

15 CVEs

Reset
More filters (1)
Columns
Oracle product: Oracle E-Business Suite / Oracle Applications Framework✕
Overview 15 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
15matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC6.7% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 6.7% No exploit published 14 93.3%
Critical 0 0.0% High 1 6.7% Medium 9 60.0% Low 5 33.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 15 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 6.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 14 93.3%
split by peak 4 / quarter
No exploit published: 14Mitigation candidate: 1 Low: 5Medium: 9High: 1 not blocked: 15 No public exploit: 14Working exploit published: 1
Q3 103 No exploit published3 High1 Medium1 Low1 not blocked3 No public exploit3 Q4 100 Q1 110 Q2 110 Q3 110 Q4 111 No exploit published1 Low1 not blocked1 No public exploit1 Q1 120 Q2 120 Q3 120 Q4 120 Q1 133 Mitigation candidate1 No exploit published2 Medium2 Low1 not blocked3 Working exploit published1 No public exploit2 Q2 130 Q3 130 Q4 130 Q1 141 No exploit published1 Medium1 not blocked1 No public exploit1 Q2 140 Q3 140 Q4 140 Q1 151 No exploit published1 Medium1 not blocked1 No public exploit1 Q2 150 Q3 154 No exploit published4 Medium3 Low1 not blocked4 No public exploit4 Q4 152 No exploit published2 Medium1 Low1 not blocked2 No public exploit2
Q4 10Q2 11Q4 11Q2 12Q4 12Q2 13Q4 13Q2 14Q4 14Q2 15Q4 15
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-4898 Medium 2015-10-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ.
CVE-2015-4865 Low 2015-10-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J.
CVE-2015-4741 Low 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup.
CVE-2015-2615 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to Portal.
CVE-2015-2610 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows.
CVE-2015-1926 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Portal.
CVE-2015-0404 Medium 2015-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Error Messages.
CVE-2014-0366 Medium 2014-01-15 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Attachments.
CVE-2013-0397 Medium 2013-01-17 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics.
CVE-2013-0390 Low 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages.
CVE-2013-0376 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Diagnostics.
CVE-2011-3519 Low 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services.
CVE-2010-0912 Medium 2010-07-13 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors.
CVE-2010-0909 Low 2010-07-13 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2010-0908 High 2010-07-13 No exploit published No public exploit Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.