Common Applications

Vendor:

First CVE: Jan 21, 2016 · Active for 10 years

16

Total CVEs

More Total CVEs than 92% of tracked products

2.3

Avg CVEs / Year

Higher CVE frequency than 73% of tracked products

7.2

Avg CVSS

Higher Avg CVSS than 44% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Common Applications over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jan 21, 2016

10 years ago

Most Recent CVE

Apr 15, 2025

465 days ago

CVE Severity & Scoring

Common Applications16 CVEs

31%

63%

All CVEs352,231 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network15 (93.8%)

Unknown1 (6.3%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low15 (93.8%)

High0 (0.0%)

Unknown1 (6.3%)

User Interaction

None3 (18.8%)

Unknown1 (6.3%)

Required12 (75.0%)

Privileges Required

Low1 (6.3%)

High0 (0.0%)

None14 (87.5%)

Unknown1 (6.3%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-2436HIGH Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.1-12.1.	Jul 21, 2021	8.2	26	NO	NO
CVE-2021-2093HIGH Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.1-12.1.	Jan 20, 2021	8.2	25	NO	NO
CVE-2019-2665HIGH Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). Supported versions that are affected are 12.1.3,	Apr 23, 2019	8.2	24	NO	NO
CVE-2017-10330CRITICAL Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4,	Oct 19, 2017	9.1	23	NO	NO
CVE-2017-3443HIGH Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3	Jan 27, 2017	8.2	22	NO	NO
CVE-2017-3328HIGH Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1	Jan 27, 2017	8.2	22	NO	NO
CVE-2017-3327HIGH Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Resources Module). Supported versions that are affected are 12.1.1, 12.1.2, 12.1	Jan 27, 2017	8.2	22	NO	NO
CVE-2017-3326HIGH Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Role Summary). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,	Jan 27, 2017	8.2	22	NO	NO
CVE-2025-30716HIGH Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.2.3-12.2	Apr 15, 2025	7.5	21	NO	NO
CVE-2020-14688HIGH Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.3 and 1	Jul 15, 2020	8.2	21	NO	NO

View all 16 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Common Applications

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.2.8	1	8.2	1.3%
12.2.7	2	8.7	1.9%
12.2.6	8	8.0	1.8%
12.2.5	8	8.0	1.8%
12.2.4	8	8.0	1.8%
12.2.3	8	8.0	1.8%
12.1.3	12	7.1	1.6%
12.1.2	6	7.0	1.6%
12.1.1	6	7.0	1.6%
11.5.10.2	1	4.0	1.2%