12.2.4

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-17	CVE-2018-2971	Unspecified vulnerability in Oracle Applications Framework Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). network low complexity oracle	4.0
2017-04-24	CVE-2017-3528	Open Redirect vulnerability in Oracle Applications Framework Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). network oracle CWE-601	5.8
2016-04-21	CVE-2016-3447	Remote Security vulnerability in Oracle E-Business Suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core. network high complexity oracle	2.6