Oracle Sales Offline vulnerabilities

Vulnerability in Oracle Sales Offline (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, requires high-privileged attacker with network access via HTTP. Successful attack can lead to takeover of Oracle Sales Offline and impact other products.

Vulnerability in Oracle Sales Offline (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily gain unauthorized access to critical data, modify it, and cause a partial denial of service (partial DOS).

Vulnerability in Oracle Sales Offline of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized creation, deletion, or modification of critical data. CVSS 8.1 (Confidentiality and Integrity impacts).