Customer Support
Monthly
Elevated data compromise in Oracle E-Business Suite's Customer Support module (Update Service Request component), versions 12.2.3 through 12.2.15, lets a low-privileged attacker with HTTP network access read and modify all Customer Support-accessible data. The flaw carries high confidentiality and integrity impact (CVSS 8.1) but no availability impact, and Oracle rates it easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; remediation is delivered via Oracle's July 2026 Critical Patch Update.
Elevated data compromise in Oracle E-Business Suite's Customer Support module (Update Service Request component), versions 12.2.3 through 12.2.15, lets a low-privileged attacker with HTTP network access read and modify all Customer Support-accessible data. The flaw carries high confidentiality and integrity impact (CVSS 8.1) but no availability impact, and Oracle rates it easily exploitable. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; remediation is delivered via Oracle's July 2026 Critical Patch Update.