CVE-2003-1116: Oracle E-Business Suite

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing requests to the TNS Listener.

Affected products

• Oracle E-Business Suite: version 10.7 only; version 11.0 only; version 11.1 only; version 11.2 only; version 11.3 only; version 11.4 only; …

Published 2003-12-31. Last modified 2026-06-16.