Oracle E-Business Suite

Name: Oracle E-Business Suite
Brand: Oracle

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical124high8medium0low

updated 2026-10-27

vulnerabilities (291)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-61882US	—OT critical	99.7% (100th)	KEV	no fix	2025-10-05	≤ 12.2.14
CVE-2025-61884US	—OT critical	95.9% (100th)	KEV	no fix	2025-10-12	≤ 12.2.14
CVE-2026-46817US	—OT critical	12.3% (96th)	KEV	no fix	2026-05-28	≤ vers:unknown/*
CVE-2025-53072US	—OT elevated	0.65% (51st)	Exploit	no fix	2025-10-21	≤ 12.2.14
CVE-2026-101767US	critical9.8OT high	0.55% (46th)	Exploit	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-22011US	—	0.30% (22nd)	Exploit	no fix	2026-04-21	≤ 12.2.15
CVE-2026-22014US	—	0.19% (9th)	Exploit	no fix	2026-04-21	≤ 12.2.15
CVE-2025-31672US	—	1.35% (71st)	—	no fix	2025-04-09	≤ 12.2.15
CVE-2024-51504US	—	0.92% (60th)	—	no fix	2024-11-07	≤ 12.2.15
CVE-2024-21071US	—	0.72% (54th)	—	no fix	2024-04-16	2 versions
CVE-2024-21075US	—	0.66% (51st)	—	no fix	2024-04-16	2 versions
CVE-2024-21074US	—	0.62% (50th)	—	no fix	2024-04-16	2 versions
CVE-2024-21079US	—	0.61% (49th)	—	no fix	2024-04-16	2 versions
CVE-2024-21078US	—	0.61% (49th)	—	no fix	2024-04-16	2 versions
CVE-2024-21077US	—	0.61% (49th)	—	no fix	2024-04-16	2 versions
CVE-2025-62481US	—OT elevated	0.60% (48th)	—	no fix	2025-10-21	≤ 12.2.14
CVE-2024-21076US	—	0.58% (47th)	—	no fix	2024-04-16	2 versions
CVE-2024-21073US	—	0.57% (47th)	—	no fix	2024-04-16	2 versions
CVE-2026-101634US	critical9.1	0.56% (46th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2025-21516US	—OT elevated	0.56% (46th)	—	no fix	2025-01-21	3 versions
CVE-2025-21506US	—OT elevated	0.56% (46th)	—	no fix	2025-01-21	3 versions
CVE-2026-101809US	critical10.0	0.54% (45th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2024-20990US	—	0.54% (45th)	—	no fix	2024-04-16	2 versions
CVE-2026-101567US	high8.8	0.53% (45th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101557US	high8.8	0.53% (45th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2024-21088US	—	0.52% (44th)	—	no fix	2024-04-16	2 versions
CVE-2024-21089US	—	0.51% (43rd)	—	no fix	2024-04-16	2 versions
CVE-2024-21080US	—	0.51% (43rd)	—	no fix	2024-04-16	2 versions
CVE-2026-70926US	—OT elevated	0.51% (43rd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-60782US	—OT elevated	0.51% (43rd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-60880US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2024-21258US	—	0.50% (42nd)	—	no fix	2024-10-15	3 versions
CVE-2026-70820US	high7.2	0.49% (42nd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-70797US	high7.2	0.49% (42nd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-70781US	high7.2	0.49% (42nd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-62540US	high7.2	0.49% (42nd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-71104US	—	0.49% (42nd)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-62546US	—	0.49% (42nd)	—	no fix	2026-07-21	≤ vers:unknown/*
CVE-2026-70927US	—	0.47% (40th)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2026-101692US	high8.8	0.46% (40th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101686US	high8.8	0.46% (40th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101685US	high8.8	0.46% (40th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-91532US	high8.8OT elevated	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-83363US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101854US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101853US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2026-101852US	high8.8	0.45% (39th)	—	no fix	2026-10-20	≤ vers:unknown/*
CVE-2024-21282US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	3 versions
CVE-2024-21279US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	3 versions
CVE-2024-21278US	—OT elevated	0.45% (39th)	—	no fix	2024-10-15	3 versions

showing 50 of 291

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control168 CVEs
CWE-20Improper Input Validation68 CVEs
CWE-285Improper Authorization22 CVEs
CWE-306Missing Authentication for Critical Function21 CVEs
CWE-863Incorrect Authorization21 CVEs
CWE-266Incorrect Privilege Assignment14 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor13 CVEs
CWE-287Improper Authentication13 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)179 CVEs
DECERT-Bund (BSI CSAF)112 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan