Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2722▼ 518 respecto a la semana anterior
Críticas / altas1296▼ 206 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior
659 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4) | 1.2% | — | Oracle E-business Suite | 21/1/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows. | |
| Modificada | Media (5) | 3.8% | — | Oracle E-business Suite | 21/1/2016 | 17/6/2026 | Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is from the January 2016… | |
| Modificada | Media (5) | 2.3% | — | Oracle E-business Suite | 21/1/2016 | 17/6/2026 | Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016… | |
| Modificada | Baja (2.1) | 0.40% | — | Oracle E-business Suite | 21/1/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager. | |
| Modificada | Baja (2.6) | 1.5% | — | Oracle E-business Suite | 21/1/2016 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX. | |
| Modificada | Media (4) | 1.3% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ. | |
| Modificada | Media (6.4) | 3.1% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Reports Security. NOTE: the previous information is from the October 2015 CPU. Oracle… | |
| Modificada | Media (5) | 1.9% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Single Signon. | |
| Modificada | Baja (2.1) | 1.2% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J. | |
| Modificada | Media (4.3) | 3.2% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle has not commented on… | |
| Modificada | Media (6.8) | 3.1% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input. NOTE: the previous information is from the October 2015 CPU. Oracle has not… | |
| Modificada | Media (6.8) | 3.1% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Punch-in. NOTE: the previous information is from the October 2015 CPU. Oracle… | |
| Modificada | Baja (3.6) | 1.8% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality and integrity via vectors related to SQL Extensions. NOTE: the previous information is from the October 2015 CPU.… | |
| Modificada | Media (4.3) | 2.6% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via vectors related to Java APIs - AOL/J. NOTE: the previous information is from the October 2015 CPU. Oracle has not… | |
| Modificada | Alta (10) | 3.8% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4798. | |
| Modificada | Alta (10) | 3.9% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Listener, a different vulnerability than CVE-2015-4839. | |
| Modificada | Media (4) | 1.5% | — | Oracle E-business Suite | 21/10/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Online patching. | |
| Modificada | Baja (3.5) | 1.2% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to OAM Dashboard. | |
| Modificada | Media (4) | 1.4% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to AD Utilities. | |
| Modificada | Baja (3.5) | 1.2% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup. | |
| Modificada | Baja (3.5) | 1.2% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Help screens. | |
| Modificada | Media (4) | 1.4% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation. | |
| Modificada | Media (5) | 2.9% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Web Management. | |
| Modificada | Baja (3.5) | 1.2% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Oracle Web Applications Desktop Integrator component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via unknown vectors. | |
| Modificada | Media (4.3) | 1.5% | — | Oracle E-business Suite | 16/7/2015 | 17/6/2026 | Unspecified vulnerability in the Technology stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Applet startup. |