Oracle E-Business Suite Web Utilities Component Oracle Applications Framework Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability has been identified in the Oracle Applications Framework component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle Applications Framework. Although the vulnerability resides within the framework, successful exploitation could significantly impact additional products, leading to a scope change. The vulnerability allows unauthorized users to read, update, insert, or delete certain data accessible through the Oracle Applications Framework.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within the Oracle Applications Framework.