Oracle Iprocurement vulnerabilities

3 CVEs affecting Oracle Iprocurement, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21973, published 2023-04-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3151, published 2018-10-17. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3,…
CVE-2016-5562, published 2016-10-25. High severity, CVSS 7.6. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality…
CVE-2023-21973, published 2023-04-18. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable…