Medium WID-SEC-2023-1810 5 CVEs

Oracle E-Business Suite: Mehrere Schwachstellen

Published Jul 18, 2023 · Updated Jul 18, 2023 · de-DE

Vendor: Oracle Product: E-Business Suite Product: E-Business Suite <= 12.2.12 Product: E-Business Suite <= 12.3.12

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle E-Business Suite ist eine Sammlung geschäftlicher Anwendungen für Unternehmen.

Vulnerabilities 5

Medium 6.5

CVE-2023-22037

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: MS Excel…

Oracle Web Applications Desktop Integrator

Jul 18, 2023
Medium 6.1

CVE-2023-22035

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported version…

Oracle Scripting

Jul 18, 2023
Medium 6.1

CVE-2023-22042

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Support…

Oracle Applications Framework

Jul 18, 2023
Medium 4.3

CVE-2023-22004

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuratio…

Oracle E-Business Suite Technology Stack

Jul 18, 2023
Medium 4.3

CVE-2023-22009

Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Manag…

Oracle Self-Service Human Resources

Jul 18, 2023

Revision history

2023-07-18 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle E-Business Suite vom 2023-07-18
https://www.oracle.com/security-alerts/cpujul2023.html#AppendixEBS