Oracle E-Business Suite User Management Workflow Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle User Management component of Oracle E-Business Suite, specifically within the Workflow and Business Events area. This issue affects versions 12.2.7 through 12.2.15. The vulnerability is easily exploitable and allows a high-privileged attacker with network access via HTTP to compromise Oracle User Management. Successful exploitation could lead to unauthorized read access, as well as the ability to update, insert, or delete certain accessible data within Oracle User Management.

Impact

Exploitation of this vulnerability could result in unauthorized access to read, update, insert, or delete data within Oracle User Management.