CVE-2016-0459: Oracle E-Business Suite

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.

Affected products

• Oracle E-Business Suite: version 11.5.10.2 only; version 12.1.3 only; version 12.2.3 only; version 12.2.4 only; version 12.2.5 only

Published 2016-01-21. Last modified 2026-06-17.