Application Object Library

Vendor:

First CVE: Jul 15, 2008 · Active for 18 years

33

Total CVEs

More Total CVEs than 96% of tracked products

3.3

Avg CVEs / Year

Higher CVE frequency than 82% of tracked products

5.8

Avg CVSS

Higher Avg CVSS than 17% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Application Object Library over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 15, 2008

18 years ago

Most Recent CVE

Apr 15, 2025

465 days ago

CVE Severity & Scoring

Application Object Library33 CVEs

79%

18%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local2 (6.1%)

Network24 (72.7%)

Unknown7 (21.2%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low25 (75.8%)

High1 (3.0%)

Unknown7 (21.2%)

User Interaction

None18 (54.5%)

Unknown7 (21.2%)

Required8 (24.2%)

Privileges Required

Low4 (12.1%)

High2 (6.1%)

None20 (60.6%)

Unknown7 (21.2%)

Top CVEs

Signals from CVEs in this product scope (33 CVEs).

33 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-10246HIGH Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4,	Aug 8, 2017	8.2	36	NO	YES
CVE-2021-2314HIGH Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10.	Apr 22, 2021	8.1	25	NO	NO
CVE-2018-3138HIGH Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1	Oct 17, 2018	8.2	25	NO	NO
CVE-2025-30730HIGH Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.5-12.2.14. Easily exploi	Apr 15, 2025	7.5	22	NO	NO
CVE-2023-21978MEDIUM Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: GUI). Supported versions that are affected are 12.2.3-12.2.11. Easily exploit	Apr 18, 2023	6.5	22	NO	NO
CVE-2017-10177HIGH Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Flexfields). The supported version that is affected is 12.2.6. Easily exp	Aug 8, 2017	8.1	21	NO	NO
CVE-2017-10328HIGH Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12	Oct 19, 2017	7.5	20	NO	NO
CVE-2016-3545MEDIUM Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confide	Jul 21, 2016	5.3	20	NO	NO
CVE-2024-20929MEDIUM Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.13. Easi	Feb 17, 2024	6.5	19	NO	NO
CVE-2020-14635MEDIUM Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging). Supported versions that are affected are 12.2.5-12.2.9. Easily explo	Jul 15, 2020	5.3	19	NO	NO

View all 33 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (33 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

3.0% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (33 CVEs).

Media Mentions

Signals from CVEs in this product scope (33 CVEs).

Top CNAs Publishing CVEs For Application Object Library

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
12.2.8	1	4.7	1.0%	0
12.2.7	5	6.2	1.9%	0
12.2.6	10	6.4	3.0%	1
12.2.5	12	6.0	2.7%	1
12.2.4	12	6.0	2.7%	1
12.2.3	12	6.0	2.7%	1
12.1.3	16	5.8	2.3%	1
11.5.10.2	5	5.3	1.7%	0