CVE-2018-3189

CVE-2018-3189 affects Oracle E-Business Suite’s Customer Interaction History component (subcomponent Outcome-Result) for versions 12.1.1–12.1.3. It is exploitable over HTTP by an unauthenticated attacker and requires user interaction; impacts include unauthorized disclosure and data modification ...