EUVD-2024-18881

Malicious code in bioql PyPI...

The vulnerability of the Party Search UI component of the software for working with customers in Oracle Trading Community, a business automation system from Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to read, create, modify, or delete data.

The vulnerability of the Party Search UI component of the software for working with Oracle Trading Community clients, a business automation system within the Oracle E-Business Suite, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker,...

CVE-2024-21167

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trading Community...