Marketing Encyclopedia System
Monthly
Unauthorized data disclosure in Oracle Marketing Encyclopedia System (E-Business Suite versions 12.2.3 through 12.2.15) allows a low-privileged, network-authenticated attacker to gain complete read access to all data accessible by the application component. The vulnerability carries a scope change, meaning successful exploitation can impact resources beyond the immediately compromised component. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the tags attribute 'Authentication Bypass' suggesting the low-privilege barrier may be weaker in practice than the PR:L CVSS metric implies.
Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Administration). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unauthorized data disclosure in Oracle Marketing Encyclopedia System (E-Business Suite versions 12.2.3 through 12.2.15) allows a low-privileged, network-authenticated attacker to gain complete read access to all data accessible by the application component. The vulnerability carries a scope change, meaning successful exploitation can impact resources beyond the immediately compromised component. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the tags attribute 'Authentication Bypass' suggesting the low-privilege barrier may be weaker in practice than the PR:L CVSS metric implies.
Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Administration). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.