Threats tagged 'ghsa-4vm7-36mf-w73m'

A vulnerability exists in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical or all accessible data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 7.1, indicating a high severity with impacts on confidentiality and integrity.