Oracle E-Business Suite <=12.2.14

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical1high0medium0low

updated 2026-10-27

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-61882US	—OT critical	99.7% (100th)	KEV	no fix	2025-10-05	—
CVE-2025-61884US	—OT critical	95.9% (100th)	KEV	no fix	2025-10-12	—
CVE-2025-53072US	—OT elevated	0.65% (51st)	Exploit	no fix	2025-10-21	—
CVE-2025-62481US	—OT elevated	0.60% (48th)	—	no fix	2025-10-21	—
CVE-2025-21516US	—OT elevated	0.56% (46th)	—	no fix	2025-01-21	—
CVE-2025-21506US	—OT elevated	0.56% (46th)	—	no fix	2025-01-21	—
CVE-2024-21258US	—	0.50% (42nd)	—	no fix	2024-10-15	—
CVE-2024-21282US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21279US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21278US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	—
CVE-2024-21280US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21276US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21271US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21270US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21269US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21268US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21267US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21266US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21265US	—OT elevated	0.45% (38th)	—	no fix	2024-10-15	—
CVE-2024-21206US	—	0.44% (38th)	—	no fix	2024-10-15	—
CVE-2024-21275US	high8.1OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21277US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21252US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2024-21250US	—OT elevated	0.43% (37th)	—	no fix	2024-10-15	—
CVE-2025-53043US	—	0.38% (32nd)	—	no fix	2025-10-21	—
CVE-2025-50105US	—	0.38% (32nd)	—	no fix	2025-07-15	—
CVE-2025-30744US	—OT elevated	0.36% (29th)	—	no fix	2025-07-15	—
CVE-2025-30743US	—OT elevated	0.36% (29th)	—	no fix	2025-07-15	—
CVE-2025-30739US	—OT elevated	0.31% (24th)	—	no fix	2025-07-15	—
CVE-2025-50107US	—	0.31% (23rd)	—	no fix	2025-07-15	—
CVE-2025-50071US	—	0.28% (20th)	—	no fix	2025-07-15	—
CVE-2025-21541US	—	0.27% (19th)	—	no fix	2025-01-21	—
CVE-2025-53071US	—	0.24% (15th)	—	no fix	2025-10-21	—
CVE-2025-53064US	—	0.24% (15th)	—	no fix	2025-10-21	—
CVE-2025-61753US	—	0.23% (14th)	—	no fix	2025-10-21	—
CVE-2025-53058US	—	0.23% (14th)	—	no fix	2025-10-21	—
CVE-2025-53052US	—	0.23% (14th)	—	no fix	2025-10-21	—
CVE-2025-53041US	—	0.23% (14th)	—	no fix	2025-10-21	—
CVE-2025-21489US	—	0.20% (10th)	—	no fix	2025-01-21	—
CVE-2025-30746US	—	0.19% (9th)	—	no fix	2025-07-15	—
CVE-2025-30745US	—	0.19% (9th)	—	no fix	2025-07-15	—
CVE-2025-50090US	—	0.17% (7th)	—	no fix	2025-07-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization19 CVEs
CWE-20Improper Input Validation14 CVEs
CWE-285Improper Authorization11 CVEs
CWE-284Improper Access Control9 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan