CVE-2026-21972

CVE-2026-21972 affects Oracle E-Business Suite, Oracle Configurator, User Interface component. Affected versions are 12.2.3–12.2.15. An unauthenticated attacker with network access via HTTP can compromise Oracle Configurator and obtain unauthorized read access to a subset of data. This is describ...