Oracle E-Business Suite Customer Care Service Requests Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle Customer Care component of Oracle E-Business Suite, specifically in versions 12.2.5 through 12.2.13. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Customer Care. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible within Oracle Customer Care.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all Oracle Customer Care accessible data, along with the ability to unauthorizedly create, delete, or modify critical data.