Skip to main content

Quoting

3 CVEs product

Monthly

CVE-2026-60859 Jul 21, 22:18 HIGH This Week

Full compromise of Oracle Quoting (a module of Oracle E-Business Suite) is possible for an authenticated, low-privileged attacker reaching the application over HTTP, per Oracle's July 2026 Critical Patch Update. Successful exploitation results in complete takeover of the Quoting component with high impact to confidentiality, integrity, and availability, though Oracle rates the attack complexity as high (difficult to exploit). No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.

Privilege Escalation Oracle Quoting
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2021-2268 Apr 22, 22:15 HIGH PATCH This Week

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Quoting
NVD
CVSS 3.1
8.1
EPSS
1.0%
CVE-2020-2833 Apr 15, 14:15 HIGH This Week

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Quoting
NVD
CVSS 3.1
8.2
EPSS
1.5%
EPSS 0% CVSS 7.5
HIGH This Week

Full compromise of Oracle Quoting (a module of Oracle E-Business Suite) is possible for an authenticated, low-privileged attacker reaching the application over HTTP, per Oracle's July 2026 Critical Patch Update. Successful exploitation results in complete takeover of the Quoting component with high impact to confidentiality, integrity, and availability, though Oracle rates the attack complexity as high (difficult to exploit). No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.

Privilege Escalation Oracle Quoting
NVD
EPSS 1% CVSS 8.1
HIGH PATCH This Week

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Oracle Quoting
NVD
EPSS 1% CVSS 8.2
HIGH This Week

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Oracle Quoting
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy