Installed Base

Vendor:

First CVE: Jul 21, 2016 · Active for 10 years

14

Total CVEs

More Total CVEs than 91% of tracked products

2.0

Avg CVEs / Year

Higher CVE frequency than 60% of tracked products

6.0

Avg CVSS

Higher Avg CVSS than 21% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Installed Base over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 21, 2016

10 years ago

Most Recent CVE

Oct 15, 2024

647 days ago

CVE Severity & Scoring

Installed Base14 CVEs

79%

21%

All CVEs352,231 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network14 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low14 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None3 (21.4%)

Unknown0 (0.0%)

Required11 (78.6%)

Privileges Required

Low2 (14.3%)

High0 (0.0%)

None12 (85.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-3361HIGH Vulnerability in the Oracle Installed Base component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3.	Jan 27, 2017	8.2	26	NO	NO
CVE-2021-2231HIGH Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability	Apr 22, 2021	8.1	25	NO	NO
CVE-2022-21251HIGH Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitabl	Jan 19, 2022	7.5	24	NO	NO
CVE-2021-2023MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily ex	Jan 20, 2021	4.7	19	NO	NO
CVE-2016-3534MEDIUM Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect int	Jul 21, 2016	4.7	19	NO	NO
CVE-2024-21072MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploi	Apr 16, 2024	6.1	18	NO	NO
CVE-2024-20958MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easil	Feb 17, 2024	5.4	18	NO	NO
CVE-2024-20935MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easil	Feb 17, 2024	6.1	18	NO	NO
CVE-2024-20933MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easil	Feb 17, 2024	6.1	18	NO	NO
CVE-2024-20934MEDIUM Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easil	Jan 16, 2024	6.1	18	NO	NO

View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Installed Base

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.2.5	1	4.7	2.0%
12.2.4	1	4.7	2.0%
12.2.3	1	4.7	2.0%
12.1.3	3	7.0	1.5%
12.1.2	2	6.5	1.8%
12.1.1	2	6.5	1.8%