Oracle Common Applications Calendar vulnerabilities

12 CVEs affecting Oracle Common Applications Calendar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61294, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-2114, published 2021-01-20. High severity, CVSS 8.2. EPSS: 59.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.1.1-12.1.3 and…
CVE-2016-3543, published 2016-07-21. Critical severity, CVSS 9.1. EPSS: 4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect…
CVE-2016-3541, published 2016-07-21. Critical severity, CVSS 9.1. EPSS: 4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect…
CVE-2017-10326, published 2017-10-19. High severity, CVSS 8.2. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,…
CVE-2017-10325, published 2017-10-19. High severity, CVSS 8.2. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,…
CVE-2017-10322, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,…
CVE-2016-3436, published 2016-04-21. High severity, CVSS 8.2. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity…
CVE-2020-2823, published 2020-04-15. High severity, CVSS 8.2. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable…
CVE-2020-2820, published 2020-04-15. High severity, CVSS 8.2. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily…
CVE-2021-2034, published 2021-01-20. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable…

Latest

CVE-2026-61294, published 2026-07-21. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Calendar Synchronizations). Supported versions that are affected are 12.2.3-12.2.15. Easily…
CVE-2021-2115, published 2021-01-20. High severity, CVSS 7.6. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily…