Oracle E-Business Suite Oracle Configurator Runtime UI Unauthenticated Data Access Vulnerability

A vulnerability exists in the Oracle Configurator component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.14. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Exploitation of this vulnerability could lead to unauthorized access to sensitive data or complete access to all data accessible through Oracle Configurator.

Impact

Successful exploitation allows unauthorized access to sensitive data or complete access to all data in Oracle Configurator.

Remediation

Users are advised to apply the patches available through the Oracle E-Business Suite Security Alert program. Instructions can be found in the Oracle E-Business Suite Patch Availability Document.