e-business_suite vulnerabilities

CVEs whose affected-version data names the e-business_suite package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

35 CVEsRSS

CVE-2026-60802Medium· 6.1

3mo ago

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations)

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated at…

▾ Sunlitoracle · e-business_suiteEPSS 0.24%via NVD

CVE-2026-60801Medium· 5.9

3mo ago

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations)

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged …

▾ Sunlitoracle · e-business_suiteEPSS 0.33%via NVD

CVE-2026-60736High· 8.1

3mo ago

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition)

Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker wit…

▾ Twilightoracle · e-business_suiteEPSS 0.36%via NVD

CVE-2026-46817Critical· 9.8CISA KEVPoC

5mo ago

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission)

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with netwo…

▾ Hadaloracle · e-business_suiteEPSS 12%via NVD

CVE-2021-45105Medium· 5.90dayPoC

4y ago

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial …

▾ Midnightapache · log4jEPSS 100%via NVD