Oracle E-Business Suite <=12.2.13

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high4medium0low

updated 2026-10-28

vulnerabilities (88)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21071US	—	0.72% (54th)	—	no fix	2024-04-16	—
CVE-2024-21075US	—	0.66% (51st)	—	no fix	2024-04-16	—
CVE-2024-21074US	—	0.62% (50th)	—	no fix	2024-04-16	—
CVE-2024-21079US	—	0.61% (49th)	—	no fix	2024-04-16	—
CVE-2024-21078US	—	0.61% (49th)	—	no fix	2024-04-16	—
CVE-2024-21077US	—	0.61% (49th)	—	no fix	2024-04-16	—
CVE-2024-21076US	—	0.58% (47th)	—	no fix	2024-04-16	—
CVE-2024-21073US	—	0.57% (47th)	—	no fix	2024-04-16	—
CVE-2025-21516US	—OT elevated	0.57% (47th)	—	no fix	2025-01-21	—
CVE-2025-21506US	—OT elevated	0.57% (47th)	—	no fix	2025-01-21	—
CVE-2024-20990US	—	0.54% (45th)	—	no fix	2024-04-16	—
CVE-2024-21088US	—	0.52% (44th)	—	no fix	2024-04-16	—
CVE-2024-21089US	—	0.51% (43rd)	—	no fix	2024-04-16	—
CVE-2024-21080US	—	0.51% (43rd)	—	no fix	2024-04-16	—
CVE-2024-21258US	—	0.50% (43rd)	—	no fix	2024-10-15	—
CVE-2024-21282US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21279US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21278US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21280US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21276US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21271US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21270US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21269US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21268US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21267US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21266US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21265US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21206US	—	0.44% (38th)	—	no fix	2024-10-15	—
CVE-2024-21275US	high8.1OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21277US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21252US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21250US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21048US	medium4.3	0.42% (36th)	—	no fix	2024-04-16	—
CVE-2024-21167US	—	0.40% (34th)	—	no fix	2024-07-16	—
CVE-2024-21152US	—	0.40% (34th)	—	no fix	2024-07-16	—
CVE-2024-21143US	—	0.40% (34th)	—	no fix	2024-07-16	—
CVE-2024-21028US	medium6.1	0.40% (34th)	—	no fix	2024-04-16	—
CVE-2024-21041US	—	0.40% (34th)	—	no fix	2024-04-16	—
CVE-2024-21023US	—	0.40% (34th)	—	no fix	2024-04-16	—
CVE-2024-21021US	—	0.40% (34th)	—	no fix	2024-04-16	—
CVE-2024-21149US	high8.1OT elevated	0.39% (33rd)	—	no fix	2024-07-16	—
CVE-2024-21153US	—	0.39% (33rd)	—	no fix	2024-07-16	—
CVE-2024-21146US	—OT elevated	0.39% (33rd)	—	no fix	2024-07-16	—
CVE-2024-21086US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21081US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21040US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21037US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21033US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21027US	—	0.38% (32nd)	—	no fix	2024-04-16	—
CVE-2024-21025US	—	0.38% (32nd)	—	no fix	2024-04-16	—

showing 50 of 88

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation64 CVEs
CWE-285Improper Authorization21 CVEs
CWE-863Incorrect Authorization20 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor11 CVEs
CWE-284Improper Access Control10 CVEs
CWE-352Cross-Site Request Forgery (CSRF)8 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-862Missing Authorization2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)88 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan