CVE-2022-21274

CVE-2022-21274 affects Oracle E-Business Suite Sourcing (component: Intelligence, RFx Creation). Affected versions are 12.2.3–12.2.11. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Sourcing, enabling unauthorized creation, deletion or modificat...

CVE-2021-2263

CVE-2021-2263 affects Oracle E-Business Suite Oracle Sourcing Intelligence/RFx (12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can cause unauthorized creation/modification/deletion of data or access to Oracle Sourcing data. Public descriptions consistently state CVSS v3.1 ...