Oracle E-Business Suite iProcurement vulnerabilities

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTPS can unauthorized create, delete, or modify critical data and gain unauthorized access to critical data and complete access to all iProcurement data. The vulnerability is difficult to exploit.

Vulnerability in Oracle E-Business Suite iProcurement (component: Requisition Management) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability, leading to takeover of iProcurement.

Vulnerability in Oracle E-Business Suite iProcurement (component: E-Content Manager Catalog) affecting versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTPS can easily exploit it, leading to takeover of iProcurement.

Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog) affecting versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can exploit it to take over iProcurement.