GCVE - cpe:2.3:a:oracle_corporation:ireceivables:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle_corporation:ireceivables:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Oracle Corporation (`5277d41a-eb16-5c58-a20b-58d92ce4ed28`)
Product	Ireceivables (`119cdd09-104b-50e3-96ec-22fb9bb7b359`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-21959`	vulnerable	2026-06-08 05:54:22.982356	Details available MEDIUM (4.3) Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iReceivables accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Published: 2023-04-18T19:54:31.563Z Updated: 2024-09-16T15:13:52.596Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpuapr2023.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-21568`	vulnerable	2026-06-08 05:40:01.784716	Details available MEDIUM (6.5) Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Access Request). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iReceivables accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Published: 2022-07-19T21:08:15.000Z Updated: 2024-09-24T19:51:52.124Z Open on db.gcve.eu Reference links https://www.oracle.com/security-alerts/cpujul2022.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3555`	vulnerable	2026-06-08 05:09:35.900669	Details available Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iReceivables. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle iReceivables. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Published: 2017-04-24T19:00:00.000Z Updated: 2024-10-04T19:22:11.647Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html https://erpscan.io/advisories/erpscan-17-024-dos-oracle-e-business-suite-anonymouslogin/ http://www.securitytracker.com/id/1038299 http://www.securityfocus.com/bid/97757	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.