Oracle E-Business Suite iStore User Management Vulnerability Allowing Unauthenticated Data Access

A vulnerability exists in the Oracle iStore component of Oracle E-Business Suite, specifically within User Management. This issue affects supported versions 12.2.3 through 12.2.14. The vulnerability is easily exploitable, allowing an unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle iStore.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or complete access to all data available through Oracle iStore.