Known vulnerabilities in Oracle E-Business Suite

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:oracle_e-business_suite:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle E-Business Suite Oracle E-Business Suite is affected by 16 known vulnerabilities: 1 critical, 3 high, 2 medium, 10 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116909 - Server-Side Request Forgery (SSRF)
CVE-2025-61884
CWE-918 High
No
Exploited
- 12.10.2025 SB2025101201
#VU116601 - Improper input validation
CVE-2025-61882
CWE-20 Critical
Available
Exploited
12.2.15 06.10.2025 SB2025100613
#VU63467 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21500
CWE-200 Medium
No
No
- 20.05.2022 SB2022052002
SB2022071965
#VU11603 - Improper Access Control
CVE-2017-3432
CWE-284 Low
No
No
- 06.04.2018 SB2017041803
#VU11602 - Improper Access Control
CVE-2017-3393
CWE-284 Low
No
No
- 06.04.2018 SB2017041803
#VU11601 - Improper Access Control
CVE-2017-3337
CWE-284 Low
No
No
- 06.04.2018 SB2017041803
#VU11600 - Improper Access Control
CVE-2017-3550
CWE-284 Low
No
No
- 06.04.2018 SB2017041803
#VU11599 - Improper Access Control
CVE-2017-3549
CWE-284 Low
Available
No
- 06.04.2018 SB2017041803
#VU11593 - Improper Access Control
CVE-2017-3528
CWE-284 Low
Available
No
- 06.04.2018 SB2017041803
#VU11591 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3556
CWE-200 Low
No
No
- 06.04.2018 SB2017041803
#VU11590 - Improper Access Control
CVE-2017-3555
CWE-284 Medium
No
No
- 06.04.2018 SB2017041803
#VU642 - Buffer over-read
CVE-2016-2176
CWE-126 Low
No
No
- 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109
CWE-119 Low
No
No
- 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105
CWE-20 Low
No
No
- 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107
CWE-284 High
Available
No
- 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU183 - Permissions, Privileges, and Access Controls
CVE-2016-3546
CWE-264 High
No
No
- 20.07.2016 SB2016072015