Oracle E-Business Suite CRM User Management Framework Unauthenticated Data Access Vulnerability

An easily exploitable vulnerability has been identified in the Oracle Common Applications component of Oracle E-Business Suite, specifically within the CRM User Management Framework. This vulnerability affects versions 12.2.3 through 12.2.14. It allows an unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful exploitation can lead to unauthorized access to critical data or complete access to all data within Oracle Common Applications that is accessible to the user.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or unrestricted access to all data within Oracle Common Applications that is accessible to the user.