Medium WID-SEC-2023-0135 12 CVEs

Oracle E-Business Suite: Mehrere Schwachstellen

Published Jan 17, 2023 · Updated Jan 17, 2023 · de-DE

Vendor: Oracle Product: E-Business Suite Product: E-Business Suite <= 12.2.12 Product: E-Business Suite <= 12.2.8 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit und Integrität zu gefährden.

Product

Oracle E-Business Suite ist eine Sammlung geschäftlicher Anwendungen für Unternehmen.

Vulnerabilities 12

High 7.5

CVE-2023-21849

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported vers…

Oracle Applications DBA

Jan 17, 2023
High 7.5

CVE-2023-21851

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

Oracle Marketing

Jan 17, 2023
High 7.5

CVE-2023-21852

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Setup). Supported versio…

Oracle Learning Management

Jan 17, 2023
High 7.5

CVE-2023-21853

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Synchronization). Suppo…

Oracle Mobile Field Service

Jan 17, 2023
High 7.5

CVE-2023-21854

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components). Supported ve…

Oracle Sales Offline

Jan 17, 2023
High 7.5

CVE-2023-21855

Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(Pock…

Oracle Sales for Handhelds

Jan 17, 2023
High 7.5

CVE-2023-21856

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Repo…

Oracle iSetup

Jan 17, 2023
High 7.5

CVE-2023-21857

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Auomated Test Suite)…

Oracle HCM Common Architecture

Jan 17, 2023
High 7.5

CVE-2023-21858

Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation). Suppor…

Oracle Collaborative Planning

Jan 17, 2023
Medium 5.4

CVE-2023-21847

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download…

Oracle Web Applications Desktop Integrator

Jan 17, 2023
Medium 5.3

CVE-2023-21825

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Supplier Management). Suppo…

Oracle iSupplier Portal

Jan 17, 2023
Medium 4.3

CVE-2023-21834

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workflow, Appro…

Oracle Self-Service Human Resources

Jan 17, 2023

Revision history

2023-01-17 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle E-Business Suite vom 2023-01-17
https://www.oracle.com/security-alerts/cpujan2023.html#AppendixEBS