GCVE - cpe:2.3:a:oracle:e-business_suite:11i:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:e-business_suite:11i:*:*:*:*:*:*:*

part: a version: 11i update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	E Business Suite (`6e274b81-bba3-5a1d-8609-c6b0ad13995c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5766`	vulnerable	2026-06-08 04:50:07.004868	Details available SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure. Published: 2007-11-08T20:00:00.000Z Updated: 2024-08-07T15:39:13.770Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html http://www.securityfocus.com/archive/1/483098/100/100/threaded http://www.zerodayinitiative.com/advisories/ZDI-07-058.html http://securityreason.com/securityalert/3344 http://osvdb.org/40080	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0543`	vulnerable	2026-06-08 04:47:50.174964	Details available Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries. Published: 2004-06-10T04:00:00.000Z Updated: 2024-08-08T00:24:25.869Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=108638417302229&w=2 http://www.us-cert.gov/cas/techalerts/TA04-160A.html http://www.securityfocus.com/bid/10465 http://www.integrigy.com/alerts/OraAppsSQLInjection.htm http://www.kb.cert.org/vuls/id/961579	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0385`	vulnerable	2026-06-08 04:47:49.650761	Details available Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities." Published: 2004-04-16T04:00:00.000Z Updated: 2024-08-08T00:17:14.437Z Open on db.gcve.eu Reference links http://www.inaccessnetworks.com/ian/services/secadv01.txt http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/15463 http://www.osvdb.org/4249 http://secunia.com/advisories/11118	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0528`	vulnerable	2026-06-08 04:45:20.400872	Details available Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-08T04:21:38.682Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html http://www.securityfocus.com/bid/2694 https://exchange.xforce.ibmcloud.com/vulnerabilities/6501	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.