High WID-SEC-2025-0821 16 CVEs

Oracle E-Business Suite: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Oracle Product: E-Business Suite Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle E-Business Suite ist eine Sammlung geschäftlicher Anwendungen für Unternehmen.

Vulnerabilities 16

Critical 9.8

CVE-2025-30727

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported version…

Oracle Oracle Scripting

Apr 15, 2025
High 7.5

CVE-2025-30707

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions …

Oracle Oracle iStore

Apr 15, 2025
High 7.5

CVE-2025-30708

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users). …

Oracle Oracle User Management

Apr 15, 2025
High 7.5

CVE-2025-30716

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Fram…

Oracle Oracle Common Applications

Apr 15, 2025
High 7.5

CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that …

Oracle Oracle Configurator

Apr 15, 2025
High 7.5

CVE-2025-30730

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

Oracle Oracle Application Object Library

Apr 15, 2025
Medium 6.5

CVE-2025-30692

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Attachments). Supported ver…

Oracle Oracle iSupplier Portal

Apr 15, 2025
Medium 6.5

CVE-2025-30717

Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Su…

Oracle Oracle Teleservice

Apr 15, 2025
Medium 6.1

CVE-2025-21582

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…

Oracle Oracle CRM Technical Foundation

Apr 15, 2025
Medium 6.1

CVE-2025-30720

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Orders). Supported versions tha…

Oracle Oracle Configurator

Apr 15, 2025
Medium 6.1

CVE-2025-30732

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

Oracle Oracle Application Object Library

Apr 15, 2025
Medium 5.4

CVE-2025-30711

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upl…

Oracle Oracle Applications Framework

Apr 15, 2025
Medium 5.4

CVE-2025-30718

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upl…

Oracle Oracle Applications Framework

Apr 15, 2025
Medium 5.3

CVE-2024-38828 Public exploit

CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

Spring Spring libspring-java libspring-java Debian Ubuntu Maven

Nov 18, 2024
Medium 5.3

CVE-2025-30726

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported …

Oracle Oracle Application Object Library

Apr 15, 2025
Low 3.6

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Configuration)…

Oracle Oracle Applications Technology Stack

Apr 15, 2025

Revision history

2025-04-15 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - April 2025 - Appendix Oracle E-Business Suite vom 2025-04-15
https://www.oracle.com/security-alerts/cpuapr2025.html#AppendixEBS