The vulnerability of sub-components of the Create, Update, Authoring Flow component of the Oracle Knowledge Management component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the Create, Update, Authoring, and Flow components of the Oracle Knowledge Management component within the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to...

CVE-2024-20940: Cross-Site Request Forgery (CSRF)

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Create, Update, Authoring Flow. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

PT-2024-1233

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description The issue is related to insufficient input validation in the Create, Update, Authoring Flow component of Oracle Knowledge Management. This allows an unauthenticated attacker...