Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2022-02350)

Oracle E-Business Suite is an extension of the original Application (ERP) and includes a collection of ERP (Enterprise Resource Planning Management), HR (Human Resource Management), CRM (Customer Relationship Management) and other applications that are seamlessly integrated into one management suite. A security vulnerability exists in the Quotes component of Oracle Trade Management in Oracle E-Business Suite versions 12.1.1-12.1.3, 12.2.3-12.2.10. An attacker could exploit the vulnerability to provide unauthorized read access to a subset of Oracle Trade Management-accessible data.