The version of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory, including the following:

  - An easily exploitable vulnerability in the Oracle Content Manager product's Content Item Manager component     that allows a low privileged, remote attacker to compromise confidentiality and integrity. (CVE-2021-2483)

  - An easily exploitable vulnerability in the Oracle Applications Manager Diagnostics component that allows a     low privileged, remote attacker to compromise confidentiality and integrity. (CVE-2021-35566)   
  - An easily exploitable vulnerability in a Miscellaneous component of the Oracle Deal Management product     that allows a low privileged, remote attacker to compromise confidentiality and integrity.
    (CVE-2021-35536)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version   number.

Detections

Analytics

Oracle E-Business Suite Multiple Vulnerabilities (Oct 2021 CPU)

high Nessus Plugin ID 154291

Version 1.7

Version 1.6

Version 1.7 Nov 28, 2023, 2:15 PM CVSSv3 score source (set to "CVE-2021-35585") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202311281415
Version 1.6 Apr 20, 2023, 4:15 PM IAVM reference Plugin Feed: 202304201615