Exploitable Vulnerability in Oracle E-Business Suite Application Component

CVE-2017-3246

Summary

A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite, specifically within the Patching subcomponent. This flaw can be exploited by a high-privileged attacker who has access to the infrastructure where the application executes, enabling them to compromise the Oracle Application Object Library. Successful exploitation may result in unauthorized creation, deletion, or modification of critical data, posing significant risks to the integrity and confidentiality of all the data accessible through this library. Supported affected versions include 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6.

References