GCVE - cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:e-business_suite:12.1:*:*:*:*:*:*:*

part: a version: 12.1 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	E Business Suite (`6e274b81-bba3-5a1d-8609-c6b0ad13995c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-0457`	vulnerable	2026-06-08 05:07:15.306390	Details available Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0456. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/lcmServiceController.jsp. Published: 2016-01-21T02:00:00.000Z Updated: 2024-08-05T22:22:54.723Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 https://erpscan.io/advisories/erpscan-16-007-oracle-e-business-suite-xxe-injection-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0456`	vulnerable	2026-06-08 05:07:15.306068	Details available Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Business Suite 12.1 and 12.2 allows remote attackers to affect confidentiality via vectors related to REST Framework, a different vulnerability than CVE-2016-0457. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability, which allows remote attackers to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or conduct SMB Relay attacks via a crafted DTD in an XML request to OA_HTML/copxmllcmservicecontroller.js. Published: 2016-01-21T02:00:00.000Z Updated: 2024-08-05T22:22:55.315Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726 https://erpscan.io/advisories/erpscan-16-006-oracle-e-business-suite-xxe-injection-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0454`	vulnerable	2026-06-08 05:07:15.304675	Details available Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager. Published: 2016-01-21T02:00:00.000Z Updated: 2024-08-05T22:22:54.684Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4926`	vulnerable	2026-06-08 05:06:48.007265	Details available Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect integrity via vectors related to UIX. Published: 2016-01-21T02:00:00.000Z Updated: 2024-08-06T06:32:31.975Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.securitytracker.com/id/1034726	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5792`	vulnerable	2026-06-08 05:04:53.829182	Details available Unspecified vulnerability in the Techstack component in Oracle E-Business Suite 12.1 allows remote attackers to affect confidentiality via unknown vectors related to Apache. Published: 2013-10-16T15:00:00.000Z Updated: 2024-09-16T18:34:57.067Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1984`	vulnerable	2026-06-08 04:51:26.023524	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1983`	vulnerable	2026-06-08 04:51:26.023142	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1980`	vulnerable	2026-06-08 04:51:26.017972	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.