Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2022-02356)

Oracle E-Business Suite is an extension of the original Application (ERP) and includes a collection of ERP (Enterprise Resource Planning Management), HR (Human Resource Management), CRM (Customer Relationship Management) and other applications that are seamlessly integrated into one management suite. Manager (OAM) allows administrators to manage Oracle E-Business Suite systems from the HTML console. Reports component in Oracle Applications Manager in releases 12.1.3, 12.2.3-12.2.10 is vulnerable. An attacker could exploit the vulnerability to cause unauthorized update, insert, or delete access to certain Oracle Applications Manager accessible data, and unauthorized read access to a subset of Oracle Applications Manager accessible data.