Oracle E-Business Suite iSupplier Portal Attachments Component Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the Oracle iSupplier Portal product of Oracle E-Business Suite, specifically within the Attachments component. This issue affects supported versions 12.2.7 through 12.2.14. The vulnerability is easily exploitable, allowing a low-privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle iSupplier Portal.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or complete access to all data within Oracle iSupplier Portal that is accessible to the user.