Oracle E-Business Suite Mobile Field Service Multiplatform Sync Errors Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle Mobile Field Service component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.13. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Exploitation of this vulnerability could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible within Oracle Mobile Field Service.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all Oracle Mobile Field Service accessible data, along with the ability to unauthorized create, delete, or modify critical data.