Oracle E-Business Suite: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 8.8
  CVE-2025-48734 Public exploit

  Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

  Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this…

  Apache Software Foundation Apache Commons BeanUtils 1.x Apache Commons BeanUtils 2.x druid Debian Ubuntu Azure Linux Wolfi Maven
  May 28, 2025
• Medium 6.5
  CVE-2026-21960

  Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported vers…

  Oracle Oracle Applications DBA
  Jan 20, 2026
• Medium 6.1
  CVE-2026-21943

  Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Scripting Admin). Supported versio…

  Oracle Oracle Scripting
  Jan 20, 2026
• Medium 5.3
  CVE-2026-21972

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface). Supported vers…

  Oracle Oracle Configurator
  Jan 20, 2026
• Medium 4.9
  CVE-2026-21959

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported version…

  Oracle Oracle Workflow
  Jan 20, 2026

Revision history

1. 2026-01-21 #2

   Referenz(en) aufgenommen: EUVD-2026-3553

2. 2026-01-20 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - January 2026 - Appendix Oracle E-Business Suite vom 2026-01-20
  https://www.oracle.com/security-alerts/cpujan2026.html#AppendixEBS