Oracle Property Manager vulnerabilities

Vulnerability in Oracle Property Manager (versions 12.2.3-12.2.15) allows a high-privileged attacker with local logon to read a subset of data.

Vulnerability in the Internal Operations component of Oracle Property Manager (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read).

Vulnerability in Oracle Property Manager (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP, with user interaction, can gain unauthorized read and modify access to some data, and the attack may impact other products.

Vulnerability in Oracle Property Manager (Internal Operations component) versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over the system.

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite, affecting the Internal Operations component. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to the takeover of Oracle Property Manager by a high-privileged attacker with network access via HTTP.