Oracle E-Business Suite Product Hub Item Catalog Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle Product Hub component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible through Oracle Product Hub.

Impact

Exploitation of this vulnerability allows for unauthorized access to critical data and the ability to create, delete, or modify data within Oracle Product Hub.