« Volver al listado

Oracle

Oracle E-business Suite: vulnerabilidades y CVE

Oracle E-business Suite tiene 574 vulnerabilidades publicadas, 242 de ellas en los últimos 12 meses. 11 son críticas y 2 figuran en el catálogo de explotación activa de CISA.

CVE574
Últimos 12 meses242
Críticas11
Explotadas activamente2

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

🔴 Explotadas activamente (CISA KEV)

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-46817Crítica (9.8)0.81%⚠ Explotación activa28 may 2026
Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated…
CVE-2022-21587Crítica (9.8)98%⚠ Explotación activa18 oct 2022
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows…

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-87165Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: ECC For Award and IDV). The supported version that is affected is V16. Easily exploitable…
CVE-2026-87150Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83483Alta (8)0.36%—15 sept 2026
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability…
CVE-2026-83482Alta (7.2)0.46%—15 sept 2026
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high…
CVE-2026-83481Alta (7.2)0.46%—15 sept 2026
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high…
CVE-2026-83479Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged…
CVE-2026-83464Alta (8.1)0.37%—15 sept 2026
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability…
CVE-2026-83463Alta (7.5)0.24%—15 sept 2026
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability…
CVE-2026-83462Crítica (9.8)0.48%—15 sept 2026
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows…
CVE-2026-83456Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Demand Signal Repository product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows…
CVE-2026-83454Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83453Alta (7.2)0.46%—15 sept 2026
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83452Crítica (9.8)0.48%—15 sept 2026
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83451Alta (8.5)0.32%—15 sept 2026
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low…
CVE-2026-83450Alta (8)0.36%—15 sept 2026
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Setup Workbench). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high…
CVE-2026-83445Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83338Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability…
CVE-2026-83331Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83329Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83328Alta (7.2)0.46%—15 sept 2026
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high…
CVE-2026-83327Crítica (9.8)0.46%—15 sept 2026
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows…
CVE-2026-83205Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83204Alta (7.5)0.32%—15 sept 2026
Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged…
CVE-2026-83200Media (6.5)0.34%—15 sept 2026
Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-83194Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83189Alta (8.8)0.42%—15 sept 2026
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-83188Alta (7.2)0.46%—15 sept 2026
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high…
CVE-2026-83185Alta (7.3)0.32%—15 sept 2026
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability…
CVE-2026-83179Alta (7.1)0.29%—15 sept 2026
Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability…
CVE-2026-83178Alta (8)0.36%—15 sept 2026
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1210 Exploitation of Remote Services173
  2. T1005 Data from Local System78
  3. T1068 Exploitation for Privilege Escalation51
  4. T1059 Command and Scripting Interpreter20
  5. T1190 Exploit Public-Facing Application20
  6. T1565.002 Transmitted Data Manipulation20

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Oracle