Oracle Application Object Library — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Application Object Library, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (33)

• CVE-2017-10246 — CVSS 8.2 (high): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supported versions that…
• CVE-2018-3138 — CVSS 8.2 (high): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload)…
• CVE-2017-10177 — CVSS 8.1 (high): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Flexfields). The supported…
• CVE-2021-2314 — CVSS 8.1 (high): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Supported versions that…
• CVE-2025-30730 — CVSS 7.5 (high): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are…
• CVE-2017-10328 — CVSS 7.5 (high): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions…
• CVE-2024-20929 — CVSS 6.5 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions…
• CVE-2023-21978 — CVSS 6.5 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: GUI). Supported versions that are…
• CVE-2008-2606 — CVSS 6.5 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and…
• CVE-2016-0589 — CVSS 6.4 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers…
• CVE-2016-0576 — CVSS 6.4 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers…
• CVE-2025-30732 — CVSS 6.1 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are…
• CVE-2016-0697 — CVSS 6.0 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5…
• CVE-2017-3246 — CVSS 6.0 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Patching). Supported versions…
• CVE-2024-21128 — CVSS 5.4 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: APIs). Supported versions that are…
• CVE-2017-3556 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management). Supported…
• CVE-2016-3545 — CVSS 5.3 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5…
• CVE-2017-10244 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments). Supported versions…
• CVE-2017-10331 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions…
• CVE-2018-3244 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload)…
• CVE-2019-3027 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help). Supported versions that…
• CVE-2020-14635 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging). Supported versions that are…
• CVE-2024-20915 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login - SSO). Supported versions that…
• CVE-2025-30726 — CVSS 5.3 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are…
• CVE-2016-0585 — CVSS 5.0 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers…
• CVE-2019-2621 — CVSS 4.7 (medium): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions…
• CVE-2020-14840 — CVSS 4.7 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that…
• CVE-2016-3434 — CVSS 4.7 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5…
• CVE-2020-14554 — CVSS 4.7 (medium): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Supported versions that…
• CVE-2016-0586 — CVSS 4.3 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers…
• CVE-2016-0520 — CVSS 4.3 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers…
• CVE-2008-2586 — CVSS 4.0 (medium): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and…
• CVE-2019-2761 — CVSS 3.7 (low): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload)…