Oracle E-Business Suite 12 vulnerabilities

6 CVEs affecting Oracle E-Business Suite 12, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0995, published 2009-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1827, published 2008-04-16. High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and…
CVE-2009-0995, published 2009-04-15. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors.
CVE-2008-5446, published 2009-01-14. Low severity, CVSS 3.5. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown…
CVE-2008-5458, published 2009-01-14. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via…
CVE-2008-5454, published 2009-01-14. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2008-5450, published 2009-01-14. Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local users to affect confidentiality via unknown vectors.