VDB
OSA-35966004
OSA-35966004
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: ECC Core (Netty)). The supported version that is affected is 15.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Command Center Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Command Center Framework.
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Enterprise Command Center Framework Version 15.0 | Oracle Enterprise Command Center Framework Version 15.0 |
| Oracle | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 |
Timeline
- Apr 24, 2026 CVE Published