Threats tagged 'ghsa-6wxv-jvjv-5pwp'

A vulnerability in the Oracle User Management component of Oracle E-Business Suite versions 12.2.6 through 12.2.15 allows a low privileged attacker with network access via HTTP to potentially take over the Oracle User Management system. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the provided patches promptly to mitigate the risk.