High NCSC-2024-0422 18 CVEs

Kwetsbaarheden verholpen in Oracle E-Business Suite

Published Oct 18, 2024 · Updated Oct 18, 2024 · nl

Vendor: Oracle Product: Advanced Pricing Product: Applications Manager Product: Common Applications Calendar Product: contract_lifecycle_management_for_public_sector Product: cost_management Product: E-Business Suite <= 12.2.13 Product: e-business_suite___12.2.14 Product: e-business_suite___13 Product: Enterprise Command Center Framework Product: Field Service Product: financials Product: Incentive Compensation Product: Installed Base Product: MES for Process Manufacturing Product: Oracle Advanced Pricing Product: Oracle Applications Manager Product: Oracle Common Applications Calendar Product: Oracle Contract Lifecycle Management for Public Sector Product: Oracle Cost Management Product: Oracle Enterprise Command Center Framework Product: Oracle Field Service Product: Oracle Financials Product: Oracle Incentive Compensation Product: Oracle Installed Base Product: Oracle MES for Process Manufacturing Product: Oracle Process Manufacturing Product Development Product: Oracle Product Hub Product: Oracle Quoting Product: Oracle Service Contracts +10 more

Summary

Oracle heeft kwetsbaarheden verholpen in E-Business Suite.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om toegang te krijgen tot gevoelige gegevens en deze mogelijk te manipuleren.

Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 18

High 8.1

CVE-2024-21250

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Qu…

Oracle Oracle Process Manufacturing Product Development

Oct 15, 2024
High 8.1

CVE-2024-21252

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version…

Oracle Oracle Product Hub

Oct 15, 2024
High 8.1

CVE-2024-21265

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). Supported ve…

Oracle Oracle Site Hub

Oct 15, 2024
High 8.1

CVE-2024-21266

Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). Supported vers…

Oracle Oracle Advanced Pricing

Oct 15, 2024
High 8.1

CVE-2024-21267

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported ve…

Oracle Oracle Cost Management

Oct 15, 2024
High 8.1

CVE-2024-21268

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported…

Oracle Oracle Applications Manager

Oct 15, 2024
High 8.1

CVE-2024-21269

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: Compensation Plan). S…

Oracle Oracle Incentive Compensation

Oct 15, 2024
High 8.1

CVE-2024-21270

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Support…

Oracle Oracle Common Applications Calendar

Oct 15, 2024
High 8.1

CVE-2024-21271

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Field Service Engineer Portal)…

Oracle Oracle Field Service

Oct 15, 2024
High 8.1

CVE-2024-21275

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface). Supported versions …

Oracle Oracle Quoting

Oct 15, 2024
High 8.1

CVE-2024-21276

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Messages). Supported version…

Oracle Oracle Work in Process

Oct 15, 2024
High 8.1

CVE-2024-21277

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integra…

Oracle Oracle MES for Process Manufacturing

Oct 15, 2024
High 8.1

CVE-2024-21278

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (compone…

Oracle Oracle Contract Lifecycle Management for Public Sector

Oct 15, 2024
High 8.1

CVE-2024-21279

Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that …

Oracle Oracle Sourcing

Oct 15, 2024
High 8.1

CVE-2024-21280

Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported vers…

Oracle Oracle Service Contracts

Oct 15, 2024
High 8.1

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported ver…

Oracle Oracle Financials

Oct 15, 2024
Medium 5.3

CVE-2024-21258

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported ve…

Oracle Oracle Installed Base

Oct 15, 2024
Medium 4.3

CVE-2024-21206

Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Diagnost…

Oracle Oracle Enterprise Command Center Framework

Oct 15, 2024

Revision history

2024-10-18 #0
Initiele versie

References

Reference - cveprojectv5; hkcert; nvd; oracle; redhat
https://www.oracle.com/security-alerts/cpuoct2024.html