Oracle Learning Management vulnerabilities

Vulnerability in Oracle Learning Management (component: Internal Operations) affects versions 12.2.3-12.2.15. It is easily exploitable by an unauthenticated attacker via HTTP, allowing unauthorized update, insert, or delete access to some data and read access to a subset of data.

Vulnerability in Oracle Learning Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data and the ability to create, delete, or modify it.

Vulnerability in Oracle Learning Management (E-Business Suite). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction.