Oracle E-Business Suite Project Foundation Technology Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle Project Foundation component of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.13. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Project Foundation. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to critical data or complete access to all data accessible within Oracle Project Foundation.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data within Oracle Project Foundation, along with the ability to create, delete, or modify critical data.