Oracle Industry Applications vulnerabilities

21 CVEs affecting Oracle Industry Applications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4795, published 2015-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-3593, published 2011-01-19. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Health Sciences - Oracle Argus Safety component in Oracle Industry Applications 5.0, 5.0.1, 5.0.2, and 5.0.3 allows remote attackers to affect confidentiality,…
CVE-2012-0582, published 2012-05-03. Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown…
CVE-2015-4795, published 2015-10-21. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Utilities Work and Asset Management component in Oracle Industry Applications 1.9.1.1.2 allows remote attackers to affect confidentiality, integrity, and…
CVE-2009-1998, published 2009-10-22. Medium severity, CVSS 4.9. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to…
CVE-2012-5066, published 2012-10-17. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Central Designer component in Oracle Industry Applications 1.3, 1.4, and 1.4.2 allows remote attackers to affect confidentiality, integrity, and availability…
CVE-2011-2323, published 2011-10-18. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to…
CVE-2011-2309, published 2011-10-18. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to…
CVE-2011-0855, published 2011-04-20. Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the InForm component in Oracle Industry Applications 4.5, 4.6, and 5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors…
CVE-2012-1763, published 2012-10-16. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to…
CVE-2012-1743, published 2012-07-17. Low severity, CVSS 2.8. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect…

Latest

CVE-2013-5857, published 2013-10-16. Low severity, CVSS 3.6. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0,…
CVE-2013-5856, published 2013-10-16. Low severity, CVSS 3.6. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0,…
CVE-2013-5837, published 2013-10-16. Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0…
CVE-2013-5811, published 2013-10-16. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0,…
CVE-2013-5762, published 2013-10-16. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Siebel CTMS component in Oracle Industry Applications 8.1.1.x allows local users to affect confidentiality and availability via unknown vectors related to…
CVE-2013-3814, published 2013-10-16. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Invoice Matching component in Oracle Industry Applications 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, and 13.2 allows remote authenticated users to…
CVE-2013-3816, published 2013-07-17. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect…
CVE-2013-2397, published 2013-04-17. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and…
CVE-2013-1525, published 2013-04-17. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown…