Process Manufacturing Financials
Monthly
Data compromise in Oracle Process Manufacturing Financials (Internal Operations component) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low-privileged, network-adjacent attacker to read, create, modify, or delete all data accessible to the module over HTTP. Rated CVSS 3.1 8.1 (High) with confidentiality and integrity impact but no availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle EBS is a recurring target for post-authentication attacks.
Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Allocation Rules). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Data compromise in Oracle Process Manufacturing Financials (Internal Operations component) of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low-privileged, network-adjacent attacker to read, create, modify, or delete all data accessible to the module over HTTP. Rated CVSS 3.1 8.1 (High) with confidentiality and integrity impact but no availability effect. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle EBS is a recurring target for post-authentication attacks.
Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Allocation Rules). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.