Oracle E-Business Suite Oracle Applications Framework Attachments File Upload Vulnerability

A vulnerability exists in the Oracle Applications Framework component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle Applications Framework. Exploitation of this vulnerability could lead to unauthorized access to update, insert, or delete certain data within the Oracle Applications Framework, as well as unauthorized read access to a subset of accessible data.

Impact

Exploitation of this vulnerability could result in unauthorized modification or deletion of data, as well as unauthorized access to read certain data within the Oracle Applications Framework.