Oracle Applications vulnerabilities

3 CVEs affecting Oracle Applications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0543, published 2004-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0543, published 2004-08-06. High severity, CVSS 10.0. EPSS: 7% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
CVE-2003-0632, published 2003-08-27. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute…
CVE-2003-0633, published 2003-08-27. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without…