[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fId22guMganuF47SU0rB_Wm829mCUkL0nu-VFU3M09IU":3,"g5a-family:oracle\u002Fe-business_suite":315,"g5a-ex:oracle\u002Fe-business_suite@*":332},{"success":4,"data":5},true,{"product":6,"versions":166,"topVulnerabilitiesByEpss":228,"kevVulnerabilities":287,"seoMetadata":293,"meta":312},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":165},"oracle","e-business_suite",61,327,1,"2025-04-15",[14,19,21,24,27,29,31,33,36,39,42,44,47,50,52,54,56,58,61,64,67,70,73,75,77,80,82,85,87,90,92,95,97,100,103,106,109,112,114,116,118,120,122,124,126,128,131,134,137,139,142,145,147,149,151,153,155,157,159,161,163],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.2",7,0,false,{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},"10.7",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"11.0",3,{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"11.1",5,{"version":28,"cve_count":26,"kev_count":17,"has_kev":18},"11.2",{"version":30,"cve_count":26,"kev_count":17,"has_kev":18},"11.3",{"version":32,"cve_count":26,"kev_count":17,"has_kev":18},"11.4",{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},"11.5",17,{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},"11.5.1",18,{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"11.5.10",25,{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},"11.5.10.1",{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},"11.5.10.2",156,{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},"11.5.2",16,{"version":51,"cve_count":38,"kev_count":17,"has_kev":18},"11.5.3",{"version":53,"cve_count":38,"kev_count":17,"has_kev":18},"11.5.4",{"version":55,"cve_count":38,"kev_count":17,"has_kev":18},"11.5.5",{"version":57,"cve_count":38,"kev_count":17,"has_kev":18},"11.5.6",{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},"11.5.7",19,{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},"11.5.8",20,{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"11.5.9",30,{"version":68,"cve_count":69,"kev_count":17,"has_kev":18},"11.6",6,{"version":71,"cve_count":72,"kev_count":17,"has_kev":18},"11.7",4,{"version":74,"cve_count":72,"kev_count":17,"has_kev":18},"11.8",{"version":76,"cve_count":72,"kev_count":17,"has_kev":18},"11i",{"version":78,"cve_count":79,"kev_count":17,"has_kev":18},"11i10cu2",2,{"version":81,"cve_count":11,"kev_count":17,"has_kev":18},"12",{"version":83,"cve_count":84,"kev_count":17,"has_kev":18},"12.0.0",11,{"version":86,"cve_count":84,"kev_count":17,"has_kev":18},"12.0.1",{"version":88,"cve_count":89,"kev_count":17,"has_kev":18},"12.0.2",9,{"version":91,"cve_count":84,"kev_count":17,"has_kev":18},"12.0.3",{"version":93,"cve_count":94,"kev_count":17,"has_kev":18},"12.0.4",23,{"version":96,"cve_count":16,"kev_count":17,"has_kev":18},"12.0.5",{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},"12.0.6",111,{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},"12.1",8,{"version":104,"cve_count":105,"kev_count":17,"has_kev":18},"12.1.1",55,{"version":107,"cve_count":108,"kev_count":17,"has_kev":18},"12.1.2",68,{"version":110,"cve_count":111,"kev_count":17,"has_kev":18},"12.1.3",133,{"version":113,"cve_count":69,"kev_count":17,"has_kev":18},"12.2",{"version":115,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.10",{"version":117,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.11",{"version":119,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.12",{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.13",{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.14",{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.15",{"version":127,"cve_count":94,"kev_count":17,"has_kev":18},"12.2.2",{"version":129,"cve_count":130,"kev_count":17,"has_kev":18},"12.2.3",70,{"version":132,"cve_count":133,"kev_count":17,"has_kev":18},"12.2.4",65,{"version":135,"cve_count":136,"kev_count":17,"has_kev":18},"12.2.5",31,{"version":138,"cve_count":41,"kev_count":17,"has_kev":18},"12.2.6",{"version":140,"cve_count":141,"kev_count":17,"has_kev":18},"12.2.7",24,{"version":143,"cve_count":144,"kev_count":17,"has_kev":18},"12.2.8",14,{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.9",{"version":148,"cve_count":11,"kev_count":17,"has_kev":18},"19.3.2",{"version":150,"cve_count":11,"kev_count":17,"has_kev":18},"4.3",{"version":152,"cve_count":11,"kev_count":17,"has_kev":18},"5.5.05.07",{"version":154,"cve_count":11,"kev_count":17,"has_kev":18},"5.5.06.00",{"version":156,"cve_count":11,"kev_count":17,"has_kev":18},"6.0.03",{"version":158,"cve_count":11,"kev_count":17,"has_kev":18},"6.1.0.0",{"version":160,"cve_count":11,"kev_count":17,"has_kev":18},"6.1.1.0",{"version":162,"cve_count":11,"kev_count":17,"has_kev":18},"6.2.3",{"version":164,"cve_count":11,"kev_count":17,"has_kev":18},"6.2.4","E-business Suite by Oracle is a technology product with 61 tracked versions and 327 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":11,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":26,"kev_count":17,"has_kev":18},{"version":30,"cve_count":26,"kev_count":17,"has_kev":18},{"version":32,"cve_count":26,"kev_count":17,"has_kev":18},{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},{"version":51,"cve_count":38,"kev_count":17,"has_kev":18},{"version":53,"cve_count":38,"kev_count":17,"has_kev":18},{"version":55,"cve_count":38,"kev_count":17,"has_kev":18},{"version":57,"cve_count":38,"kev_count":17,"has_kev":18},{"version":59,"cve_count":60,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":69,"kev_count":17,"has_kev":18},{"version":71,"cve_count":72,"kev_count":17,"has_kev":18},{"version":74,"cve_count":72,"kev_count":17,"has_kev":18},{"version":76,"cve_count":72,"kev_count":17,"has_kev":18},{"version":78,"cve_count":79,"kev_count":17,"has_kev":18},{"version":81,"cve_count":11,"kev_count":17,"has_kev":18},{"version":83,"cve_count":84,"kev_count":17,"has_kev":18},{"version":86,"cve_count":84,"kev_count":17,"has_kev":18},{"version":88,"cve_count":89,"kev_count":17,"has_kev":18},{"version":91,"cve_count":84,"kev_count":17,"has_kev":18},{"version":93,"cve_count":94,"kev_count":17,"has_kev":18},{"version":96,"cve_count":16,"kev_count":17,"has_kev":18},{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},{"version":104,"cve_count":105,"kev_count":17,"has_kev":18},{"version":107,"cve_count":108,"kev_count":17,"has_kev":18},{"version":110,"cve_count":111,"kev_count":17,"has_kev":18},{"version":113,"cve_count":69,"kev_count":17,"has_kev":18},{"version":115,"cve_count":17,"kev_count":17,"has_kev":18},{"version":117,"cve_count":17,"kev_count":17,"has_kev":18},{"version":119,"cve_count":17,"kev_count":17,"has_kev":18},{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},{"version":127,"cve_count":94,"kev_count":17,"has_kev":18},{"version":129,"cve_count":130,"kev_count":17,"has_kev":18},{"version":132,"cve_count":133,"kev_count":17,"has_kev":18},{"version":135,"cve_count":136,"kev_count":17,"has_kev":18},{"version":138,"cve_count":41,"kev_count":17,"has_kev":18},{"version":140,"cve_count":141,"kev_count":17,"has_kev":18},{"version":143,"cve_count":144,"kev_count":17,"has_kev":18},{"version":146,"cve_count":17,"kev_count":17,"has_kev":18},{"version":148,"cve_count":11,"kev_count":17,"has_kev":18},{"version":150,"cve_count":11,"kev_count":17,"has_kev":18},{"version":152,"cve_count":11,"kev_count":17,"has_kev":18},{"version":154,"cve_count":11,"kev_count":17,"has_kev":18},{"version":156,"cve_count":11,"kev_count":17,"has_kev":18},{"version":158,"cve_count":11,"kev_count":17,"has_kev":18},{"version":160,"cve_count":11,"kev_count":17,"has_kev":18},{"version":162,"cve_count":11,"kev_count":17,"has_kev":18},{"version":164,"cve_count":11,"kev_count":17,"has_kev":18},[229,237,244,251,258,264,269,274,278,283],{"cveId":230,"description":231,"publishedDate":232,"cvssScore":233,"cvssVersion":234,"severity":235,"isKev":18,"epssScore":236},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":238,"description":239,"publishedDate":240,"cvssScore":241,"cvssVersion":234,"severity":242,"isKev":4,"epssScore":243},"CVE-2022-21587","Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2022-10-18",9.8,"Critical",0.98342,{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":234,"severity":249,"isKev":18,"epssScore":250},"CVE-2022-21500","Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. Note: Authentication is required for successful attack, however the user may be self-registered. \u003Cbr> \u003Cbr>Oracle E-Business Suite 12.1 is not impacted by this vulnerability. Customers should refer to the Patch Availability Document for details. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2022-05-20",7.5,"High",0.71703,{"cveId":252,"description":253,"publishedDate":254,"cvssScore":255,"cvssVersion":256,"severity":242,"isKev":18,"epssScore":257},"CVE-2004-0385","Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple \"vulnerabilities.\"","2004-06-01",10,"v2",0.15501,{"cveId":259,"description":260,"publishedDate":261,"cvssScore":262,"cvssVersion":256,"severity":235,"isKev":18,"epssScore":263},"CVE-2004-1366","Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.","2004-08-04",4.6,0.15495,{"cveId":265,"description":266,"publishedDate":261,"cvssScore":267,"cvssVersion":256,"severity":249,"isKev":18,"epssScore":268},"CVE-2004-1364","Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\\bin directory.",8.5,0.13892,{"cveId":270,"description":271,"publishedDate":272,"cvssScore":255,"cvssVersion":256,"severity":242,"isKev":18,"epssScore":273},"CVE-2006-0289","Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal.","2006-01-18",0.12957,{"cveId":275,"description":276,"publishedDate":261,"cvssScore":89,"cvssVersion":256,"severity":242,"isKev":18,"epssScore":277},"CVE-2004-1371","Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.",0.10767,{"cveId":279,"description":280,"publishedDate":281,"cvssScore":248,"cvssVersion":256,"severity":249,"isKev":18,"epssScore":282},"CVE-2014-4278","Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Forms.","2014-10-15",0.10444,{"cveId":284,"description":285,"publishedDate":261,"cvssScore":241,"cvssVersion":234,"severity":242,"isKev":18,"epssScore":286},"CVE-2004-1363","Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.",0.09095,[288],{"cveId":238,"description":239,"publishedDate":240,"cvssScore":241,"severity":242,"isKev":4,"epssScore":243,"cisaVulnName":289,"cisaDateAdded":290,"cisaShortDescription":291,"cisaRequiredAction":292},"Oracle E-Business Suite Unspecified Vulnerability","2023-02-02","Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.","Apply updates per vendor instructions.",{"title":294,"metaDescription":295,"keywords":296,"structuredData":297},"E-business Suite by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for E-business Suite by Oracle covering 61 versions with 327 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","E-business Suite vulnerabilities, E-business Suite security, E-business Suite CVE, Oracle E-business Suite, E-business Suite threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, E-business Suite KEV, E-business Suite exploited vulnerabilities",{"@context":298,"@type":299,"name":300,"description":295,"url":301,"manufacturer":302,"applicationCategory":306,"softwareVersion":307,"mainEntity":308},"https:\u002F\u002Fschema.org","SoftwareApplication","E-business Suite","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fe-business_suite",{"@type":303,"name":304,"url":305},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","61 versions tracked",{"@type":309,"name":310,"description":311,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","E-business Suite Security Vulnerabilities","Security vulnerabilities affecting E-business Suite by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":313,"apiVersion":314},"2026-10-16T23:47:47.327Z","3.0",[316,318,320,322,324,326,328,330],{"product":317,"cves":69},"e-business_suite_12",{"product":319,"cves":72},"e-business_suite_11i",{"product":321,"cves":72},"e-business_suite_cloud_manager_and_cloud_backup_module",{"product":323,"cves":23},"e-business_suite_technology_stack",{"product":325,"cves":79},"e-business_suite_secure_enterprise_search",{"product":327,"cves":11},"e-business_suite_application_management_pack",{"product":329,"cves":11},"e-business_suite_information_discovery",{"product":331,"cves":11},"e-business_suite_access_gate",{"rows":333,"total":11,"capped":18,"failed":17},[334],{"cveId":238,"name":289,"severity":242,"cvss":241,"added":290,"epss":243,"published":335,"ranges":336,"checked":4,"hits":338,"covers":18},"2022-10-18T21:15:10.96",[337],"12.2.3 to 12.2.11",[]]