Landed Cost Management
Monthly
Unauthorized data access and partial data manipulation in Oracle Landed Cost Management (versions 12.2.3 through 12.2.15) is exploitable by low-privileged, network-accessible attackers via HTTP, with no user interaction required. Tagged as an Authentication Bypass, the vulnerability in the Internal Operations component allows an authenticated low-privilege user to exceed their authorization, gaining complete read access to all data accessible by the module and limited write/insert/delete capability. No public exploit has been identified at time of analysis and the flaw is not listed in the CISA KEV catalog.
Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.
Unauthorized data access and partial data manipulation in Oracle Landed Cost Management (versions 12.2.3 through 12.2.15) is exploitable by low-privileged, network-accessible attackers via HTTP, with no user interaction required. Tagged as an Authentication Bypass, the vulnerability in the Internal Operations component allows an authenticated low-privilege user to exceed their authorization, gaining complete read access to all data accessible by the module and limited write/insert/delete capability. No public exploit has been identified at time of analysis and the flaw is not listed in the CISA KEV catalog.
Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.