# Oracle One-to-One Fulfillment vulnerabilities Source: https://junglewise.ai/threats/technologies/one-to-one-fulfillment Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/one-to-one-fulfillment.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 21 vulnerabilities in Oracle One-to-One Fulfillment: 0 in the last 7 days and 2 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-101697, was published on 20 October 2026. 1 vulnerability in the last four weeks, level on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 2 - All time: 21 (1 critical, 0 exploited in the wild) ## About Oracle One-to-One Fulfillment One-to-One Fulfillment is a library within the Oracle E-Business Suite used for managing electronic communications and document delivery. ## Latest Oracle One-to-One Fulfillment vulnerabilities - [CVE-2026-101697: Oracle One-to-One Fulfillment cross-site scripting in Admin Console UI](https://junglewise.ai/threats/cve-2026-101697-vulnerability-in-the-oracle-one-to-one-fulfillment-product-of) (medium, CVSS 6.1, published 20 Oct 2026) - [CVE-2026-83171: Oracle One-to-One Fulfillment data access and denial of service vulnerability in Documents component](https://junglewise.ai/threats/cve-2026-83171-oracle-one-to-one-fulfillment-data-access-and-denial-of-service) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2017-3439: Oracle E-Business Suite One-to-One Fulfillment UI vulnerability](https://junglewise.ai/threats/cve-2017-3439-oracle-e-business-suite-one-to-one-fulfillment-ui-vulnerability) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3438: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3438-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3437: Oracle E-Business Suite One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3437-oracle-e-business-suite-one-to-one-fulfillment-vulnerability-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3436: Oracle One-to-One Fulfillment unauthorized data access in User Interface](https://junglewise.ai/threats/cve-2017-3436-oracle-one-to-one-fulfillment-unauthorized-data-access-in-user) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3435: Oracle E-Business Suite One-to-One Fulfillment UI data compromise](https://junglewise.ai/threats/cve-2017-3435-oracle-e-business-suite-one-to-one-fulfillment-ui-data-compromise) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3433: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3433-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3431: Oracle One-to-One Fulfillment unauthorized data access in User Interface](https://junglewise.ai/threats/cve-2017-3431-oracle-one-to-one-fulfillment-unauthorized-data-access-in-user) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3430: Oracle E-Business Suite One-to-One Fulfillment security bypass in User Interface](https://junglewise.ai/threats/cve-2017-3430-oracle-e-business-suite-one-to-one-fulfillment-security-bypass-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3429: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3429-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3428: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3428-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3427: Oracle E-Business Suite One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3427-oracle-e-business-suite-one-to-one-fulfillment-vulnerability-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3426: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3426-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3425: Oracle E-Business Suite One-to-One Fulfillment Security Bypass in UI](https://junglewise.ai/threats/cve-2017-3425-oracle-e-business-suite-one-to-one-fulfillment-security-bypass-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3424: Oracle E-Business Suite vulnerability in One-to-One Fulfillment UI](https://junglewise.ai/threats/cve-2017-3424-oracle-e-business-suite-vulnerability-in-one-to-one-fulfillment-ui) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3423: Oracle E-Business Suite One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3423-oracle-e-business-suite-one-to-one-fulfillment-vulnerability-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3422: Oracle E-Business Suite One-to-One Fulfillment UI vulnerability](https://junglewise.ai/threats/cve-2017-3422-oracle-e-business-suite-one-to-one-fulfillment-ui-vulnerability) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3421: Oracle One-to-One Fulfillment unauthorized data access in User Interface](https://junglewise.ai/threats/cve-2017-3421-oracle-one-to-one-fulfillment-unauthorized-data-access-in-user) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3278: Oracle One-to-One Fulfillment security bypass in Request Confirmation](https://junglewise.ai/threats/cve-2017-3278-oracle-one-to-one-fulfillment-security-bypass-in-request) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2016-8325: Oracle One-to-One Fulfillment improper access control in Internal Operations](https://junglewise.ai/threats/cve-2016-8325-oracle-one-to-one-fulfillment-improper-access-control-in-internal) (critical, CVSS 9.1, published 27 Jan 2017) ## Most severe Oracle One-to-One Fulfillment vulnerabilities - [CVE-2016-8325: Oracle One-to-One Fulfillment improper access control in Internal Operations](https://junglewise.ai/threats/cve-2016-8325-oracle-one-to-one-fulfillment-improper-access-control-in-internal) (critical, CVSS 9.1, published 27 Jan 2017) - [CVE-2017-3439: Oracle E-Business Suite One-to-One Fulfillment UI vulnerability](https://junglewise.ai/threats/cve-2017-3439-oracle-e-business-suite-one-to-one-fulfillment-ui-vulnerability) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3438: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3438-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3437: Oracle E-Business Suite One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3437-oracle-e-business-suite-one-to-one-fulfillment-vulnerability-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3436: Oracle One-to-One Fulfillment unauthorized data access in User Interface](https://junglewise.ai/threats/cve-2017-3436-oracle-one-to-one-fulfillment-unauthorized-data-access-in-user) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3435: Oracle E-Business Suite One-to-One Fulfillment UI data compromise](https://junglewise.ai/threats/cve-2017-3435-oracle-e-business-suite-one-to-one-fulfillment-ui-data-compromise) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3433: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3433-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3431: Oracle One-to-One Fulfillment unauthorized data access in User Interface](https://junglewise.ai/threats/cve-2017-3431-oracle-one-to-one-fulfillment-unauthorized-data-access-in-user) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3430: Oracle E-Business Suite One-to-One Fulfillment security bypass in User Interface](https://junglewise.ai/threats/cve-2017-3430-oracle-e-business-suite-one-to-one-fulfillment-security-bypass-in) (high, CVSS 8.2, published 27 Jan 2017) - [CVE-2017-3429: Oracle One-to-One Fulfillment vulnerability in User Interface](https://junglewise.ai/threats/cve-2017-3429-oracle-one-to-one-fulfillment-vulnerability-in-user-interface) (high, CVSS 8.2, published 27 Jan 2017) ## Vulnerabilities per week 1 vulnerability in the last four weeks, level on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle One-to-One Fulfillment vulnerabilities", https://junglewise.ai/threats/technologies/one-to-one-fulfillment, 9 November 2026.