Oracle E-Business Suite Oracle Applications Framework Attachments File Upload Vulnerability

A vulnerability exists in the Oracle Applications Framework component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle Applications Framework. Exploitation of this vulnerability requires human interaction from a third party. While the issue is contained within the Oracle Applications Framework, successful attacks could significantly affect other products, leading to a scope change. The vulnerability allows for unauthorized read access to certain data and unauthorized update, insert, or delete access to some data accessible through the Oracle Applications Framework.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within the Oracle Applications Framework.