Threats tagged 'ghsa-cpg8-mvxr-5q8h'

A vulnerability exists in the Oracle Common Applications Calendar component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to potentially gain unauthorized creation, deletion, or modification access to critical or all accessible data within the calendar application, and may also cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality, integrity, and availability.