NotCVE - vendor:"Oracle" product:"E-business Suite"

Page 4 of 328 results (0.005 seconds)

CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0

CVE-2019-2546

https://notcve.org/view.php?id=CVE-2019-2546

16 Jan 2019 — Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in un... • http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html •

CVSS: 5.9EPSS: 6%CPEs: 44EXPL: 0

CVE-2018-0734 – Timing attack against DSA

https://notcve.org/view.php?id=CVE-2018-0734

30 Oct 2018 — The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p). • http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html • CWE-327: Use of a Broken or Risky Cryptographic Algorithm CWE-385: Covert Timing Channel •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-2934

https://notcve.org/view.php?id=CVE-2018-2934

18 Jul 2018 — Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Object Library accessible data. CVSS 3.0 Base Score 5.... • http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html • CWE-665: Improper Initialization •

CVSS: 7.4EPSS: 2%CPEs: 6EXPL: 0

CVE-2018-2804

https://notcve.org/view.php?id=CVE-2018-2804

19 Apr 2018 — Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application... • http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html •

CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-2864

https://notcve.org/view.php?id=CVE-2018-2864

19 Apr 2018 — Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Application Object Library accessible data. CVSS 3.0 B... • http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html •

CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2018-2865

https://notcve.org/view.php?id=CVE-2018-2865

19 Apr 2018 — Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Ba... • http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html •

CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2018-2866

https://notcve.org/view.php?id=CVE-2018-2866

CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-2867

https://notcve.org/view.php?id=CVE-2018-2867

CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2018-2872

https://notcve.org/view.php?id=CVE-2018-2872

19 Apr 2018 — Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle General Ledger accessible data. CVSS 3.0 Base Sc... • http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html •

CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2018-2873

https://notcve.org/view.php?id=CVE-2018-2873

1 2 3 4 5