Oracle One-to-One Fulfillment vulnerabilities
29 known CVE vulnerabilities in Oracle One-to-One Fulfillment, translated and rated.
- CVE-2017-3434High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized creation, deletion, or modification of data.
- CVE-2017-3432High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data and the ability to modify it.
- CVE-2017-3439High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3438High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3437High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3436High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a third party, increasing the risk for the organization.
- CVE-2017-3435High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3433High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a third party, increasing the risk of an attack.
- CVE-2017-3431High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. It requires user interaction, which increases the risk of an attack.
- CVE-2017-3430High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3429High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2017-3428High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3427High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.
- CVE-2017-3426High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3425High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
- CVE-2017-3424High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a third party, increasing the risk of attack.
- CVE-2017-3423High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, increasing the risk for the organization.
- CVE-2017-3422High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires human interaction from a person other than the attacker, potentially leading to unauthorized access to critical data.
- CVE-2017-3421High
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires user interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3278High
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Request Confirmation) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Attacks may lead to unauthorized access to critical data and complete access to all data accessible in Oracle One-to-One Fulfillment.
- CVE-2016-8325Critical
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can create, delete, or modify critical data.
- CVE-2026-101706Medium
Vulnerability in Oracle One-to-One Fulfillment (Documents component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker can lead to unauthorized access to critical data or all accessible data.
- CVE-2026-101699High
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle One-to-One Fulfillment.
- CVE-2026-101697Medium
Vulnerability in Oracle One-to-One Fulfillment (Admin Console UI component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by an unauthenticated attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
- CVE-2026-83177High
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality and integrity.
- CVE-2026-83173High
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, impacting confidentiality and availability.
- CVE-2026-83171High
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, with potential impact on additional products (scope change).
- CVE-2026-83170High
Vulnerability in Oracle One-to-One Fulfillment (component: Documents) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with access to the physical communication segment attached to the hardware where Oracle One-to-One Fulfillment executes to compromise the system.
- CVE-2026-83169High
Vulnerability in Oracle One-to-One Fulfillment (component: Java Server Issues) in versions 12.2.3-12.2.15. Difficult to exploit, allows unauthenticated attacker via HTTP to take over the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

