Oracle E-Business Suite Upload Attachments Vulnerability in Oracle Applications Framework Allowing Unauthorized Data Modification

Vulnerability

A vulnerability exists in the Upload Attachments component of the Oracle Applications Framework within Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Oracle Applications Framework. Exploitation of this vulnerability could lead to unauthorized update, insert, or delete access to certain data within the Oracle Applications Framework.

Impact

Exploitation of this vulnerability could result in unauthorized modifications to data accessible through the Oracle Applications Framework.

Added: Oct 21, 2025, 9:27 PM
Updated: Oct 21, 2025, 9:27 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
0.6
exploitability
4.9
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.