Kwetsbaarheden verholpen in Oracle E-Business Suite

Summary

Details

Vulnerabilities 16

• Critical 9.8
  CVE-2025-30727

  Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported version…

  Oracle Oracle Scripting
  Apr 15, 2025
• High 7.5
  CVE-2025-30707

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions …

  Oracle Oracle iStore
  Apr 15, 2025
• High 7.5
  CVE-2025-30708

  Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users). …

  Oracle Oracle User Management
  Apr 15, 2025
• High 7.5
  CVE-2025-30716

  Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Fram…

  Oracle Oracle Common Applications
  Apr 15, 2025
• High 7.5
  CVE-2025-30728

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that …

  Oracle Oracle Configurator
  Apr 15, 2025
• High 7.5
  CVE-2025-30730

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

  Oracle Oracle Application Object Library
  Apr 15, 2025
• Medium 6.5
  CVE-2025-30692

  Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Attachments). Supported ver…

  Oracle Oracle iSupplier Portal
  Apr 15, 2025
• Medium 6.5
  CVE-2025-30717

  Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Su…

  Oracle Oracle Teleservice
  Apr 15, 2025
• Medium 6.1
  CVE-2025-21582

  Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…

  Oracle Oracle CRM Technical Foundation
  Apr 15, 2025
• Medium 6.1
  CVE-2025-30720

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Supported versions tha…

  Oracle Oracle Configurator
  Apr 15, 2025
• Medium 6.1
  CVE-2025-30732

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

  Oracle Oracle Application Object Library
  Apr 15, 2025
• Medium 5.4
  CVE-2025-30711

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upl…

  Oracle Oracle Applications Framework
  Apr 15, 2025
• Medium 5.4
  CVE-2025-30718

  Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upl…

  Oracle Oracle Applications Framework
  Apr 15, 2025
• Medium 5.3
  CVE-2024-38828 Public exploit

  CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

  Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

  Spring Spring libspring-java libspring-java Debian Ubuntu Maven
  Nov 18, 2024
• Medium 5.3
  CVE-2025-30726

  Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

  Oracle Oracle Application Object Library
  Apr 15, 2025
• Low 3.6
  CVE-2025-30731

  Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration)…

  Oracle Oracle Applications Technology Stack
  Apr 15, 2025

Revision history

1. 2025-04-16 #1.0.0

   Initiele versie

References

• Reference - cveprojectv5; nvd; oracle
  https://www.oracle.com/security-alerts/cpuapr2025.html