Applications Framework

Vendor:

First CVE: Apr 21, 2016 · Active for 10 years

30

Total CVEs

More Total CVEs than 96% of tracked products

2.7

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

6.0

Avg CVSS

Higher Avg CVSS than 21% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Applications Framework over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 21, 2016

10 years ago

Most Recent CVE

Apr 21, 2026

94 days ago

CVE Severity & Scoring

Applications Framework30 CVEs

70%

23%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local0 (0.0%)

Network30 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low29 (96.7%)

High1 (3.3%)

Unknown0 (0.0%)

User Interaction

None14 (46.7%)

Unknown0 (0.0%)

Required16 (53.3%)

Privileges Required

Low11 (36.7%)

High3 (10.0%)

None16 (53.3%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (30 CVEs).

30 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-3528MEDIUM Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). Supported versions that a	Apr 24, 2017	5.4	37	NO	YES
CVE-2021-2200CRITICAL Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10. Easily exploitable	Apr 22, 2021	9.1	31	NO	NO
CVE-2020-2890HIGH Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. E	Apr 15, 2020	8.2	25	NO	NO
CVE-2022-21566HIGH Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.9-12.2.11. Easily expl	Jul 19, 2022	7.5	24	NO	NO
CVE-2021-2380HIGH Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.1.3 and 12	Jul 21, 2021	7.6	24	NO	NO
CVE-2020-14610HIGH Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). The supported version that is affected is 12.2.9. Easi	Jul 15, 2020	7.6	24	NO	NO
CVE-2019-2682HIGH Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3,	Apr 23, 2019	8.2	24	NO	NO
CVE-2018-3243HIGH Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.	Oct 17, 2018	8.2	24	NO	NO
CVE-2022-21636MEDIUM Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are 12.2.6-12.2.11. Easi	Oct 18, 2022	6.5	22	NO	NO
CVE-2022-21468MEDIUM Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). Supported versions that are affected are 12.2.4-12.2.11. Easily exploitab	Apr 19, 2022	6.1	21	NO	NO

View all 30 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (30 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

1 CVE

3.3% of CVEs· 97th percentile

ExploitDB

1 CVE

3.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (30 CVEs).

Media Mentions

Signals from CVEs in this product scope (30 CVEs).

Top CNAs Publishing CVEs For Applications Framework

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
12.2.9	2	7.9	1.2%	0
12.2.8	1	8.2	1.3%	0
12.2.7	2	6.3	1.4%	0
12.2.6	4	6.5	4.8%	1
12.2.5	5	6.6	4.1%	1
12.2.4	5	6.6	4.1%	1
12.2.3	5	6.6	4.1%	1
12.2.10	1	9.1	1.2%	0
12.1.3	11	6.0	2.5%	1