Teleservice
Monthly
Full takeover of Oracle Teleservice (E-Business Suite versions 12.2.3-12.2.15) is achievable by any low-privileged attacker with network access via HTTP, exploiting a flaw in the Service Request Form component. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that exploitation is straightforward - no elevated privileges, no user interaction, and no complex preconditions beyond a valid low-privilege account. Oracle's own advisory characterizes the outcome as complete product takeover, implying full loss of confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at time of analysis.
Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Full takeover of Oracle Teleservice (E-Business Suite versions 12.2.3-12.2.15) is achievable by any low-privileged attacker with network access via HTTP, exploiting a flaw in the Service Request Form component. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) confirms that exploitation is straightforward - no elevated privileges, no user interaction, and no complex preconditions beyond a valid low-privilege account. Oracle's own advisory characterizes the outcome as complete product takeover, implying full loss of confidentiality, integrity, and availability. No public exploit code or CISA KEV listing has been identified at time of analysis.
Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Diagnostics Scripts). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.