Oracle E-Business Suite CRM Technical Foundation Preferences Component Vulnerability

A vulnerability exists in the Preferences component of the Oracle CRM Technical Foundation product within Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.14. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Exploitation requires human interaction from a third party. While the vulnerability is localized to Oracle CRM Technical Foundation, successful attacks could significantly impact other products, leading to a scope change. The vulnerability allows unauthorized update, insert, or delete access to certain accessible data within Oracle CRM Technical Foundation, as well as unauthorized read access to a subset of the same data.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within Oracle CRM Technical Foundation.