Vulnerabilities

TI-2026-57566 CVE-2026-83327 · GHSA-8j59-j7vj-wc22

Improper authentication in Oracle Applications Framework

MEDIUM 49

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2026-09-15 No fix listed CWE-287

TI-2026-44660 CVE-2026-62546 · GHSA-h45q-f2rp-2rf6

Improper access control in Oracle Applications Framework

MEDIUM 42

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284

TI-2026-44648 CVE-2026-62534 · GHSA-v4r8-6r5r-r9wh

Improper privilege management in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-269

TI-2026-43434 CVE-2026-60774 · GHSA-3h92-24v4-85mc

Improper access control in Oracle Applications Framework

LOW 31

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.003 Published 2026-07-21 No fix listed CWE-284

TI-2026-43428 CVE-2026-60768 · GHSA-45fj-7pmr-8hr5

Improper access control in Oracle Applications Framework

LOW 37

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284

TI-2026-43347 CVE-2026-60684 · GHSA-7jq5-m4p2-vh3p

Improper access control in Oracle Applications Framework

LOW 21

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments).

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00208 Published 2026-07-21 No fix listed CWE-284

TI-2026-43339 CVE-2026-60676 · GHSA-rfqc-v2rx-54p2

Improper access control in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-43338 CVE-2026-60675 · GHSA-8v2h-7fvm-w28p

Improper access control in Oracle Applications Framework

MEDIUM 40

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-26587 CVE-2026-34298 · GHSA-jpw8-46mw-jgq7

Improper access control in Oracle Applications Framework

LOW 21

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00218 Published 2026-04-21 No fix listed CWE-284

TI-2025-33070 CVE-2025-53071 · GHSA-fmhf-wc56-gjj8

Improper access control in Oracle Applications Framework

LOW 20

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Upload Attachments).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-10-21 No fix listed CWE-284

TI-2025-33063 CVE-2025-53064 · GHSA-6pp5-jwmc-p2p6

Improper access control in Oracle Applications Framework

LOW 20

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-10-21 No fix listed CWE-284

TI-2025-31984 CVE-2025-50071 · GHSA-8c7h-fr9h-c84m

Improper access control in Oracle Applications Framework

LOW 28

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00278 Published 2025-07-15 No fix listed CWE-284

TI-2025-21991 CVE-2025-30718 · GHSA-f9xr-7pwr-89qh

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 24

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00338 Published 2025-04-15 No fix listed

TI-2025-21984 CVE-2025-30711 · GHSA-mg6v-4575-j2gc

Improper access control in Oracle Applications Framework

LOW 24

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00361 Published 2025-04-15 No fix listed CWE-284

TI-2024-13872 CVE-2024-21080 · GHSA-3xqv-2ccr-mmcc

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 29

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: REST Services).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00509 Published 2024-04-16 No fix listed

TI-2023-08412 CVE-2023-22042 · GHSA-9f8c-4rfr-vhqx

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 28

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2023-07-18 No fix listed

TI-2022-06015 CVE-2022-21636 · GHSA-j2vq-gw3q-qhc5

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 30

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00838 Published 2022-10-18 No fix listed

TI-2022-05946 CVE-2022-21566 · GHSA-frj6-3m84-3f83

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

MEDIUM 41

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01104 Published 2022-07-19 No fix listed

TI-2022-05862 CVE-2022-21477 · GHSA-mccj-cxq2-rfrr

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 25

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2022-04-19 No fix listed

TI-2022-05853 CVE-2022-21468 · GHSA-pxr2-xgv2-7cq3

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 29

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00891 Published 2022-04-19 No fix listed

TI-2021-02136 CVE-2021-2477 · GHSA-v662-cr8f-hg7r

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 33

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01463 Published 2021-10-20 No fix listed

TI-2021-02049 CVE-2021-2380 · GHSA-8m6c-x4jx-xgx8

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 34

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0069 Published 2021-07-20 No fix listed

TI-2021-01876 CVE-2021-2200 · GHSA-66vj-78p3-r8q8

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

MEDIUM 50

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01191 Published 2021-04-22 No fix listed

TI-2020-11586 CVE-2020-14746 · GHSA-pwx2-cmjj-vqqx

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite…

LOW 24

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01168 Published 2020-10-21 No fix listed

TI-2020-11459 CVE-2020-14610 · GHSA-q2qc-9pjq-74f3

Cross-site scripting in Oracle Applications Framework

LOW 35

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00929 Published 2020-07-15 No fix listed CWE-79

Vulnerabilities

Filters