Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-04-24	CVE-2017-3528	Open Redirect vulnerability in Oracle Applications Framework Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepicker, etc.)). network low complexity oracle CWE-601	5.4
2016-04-21	CVE-2016-3447	Unspecified vulnerability in Oracle Applications Framework Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to OAF Core. network high complexity oracle	6.9