Oracle Sales Online vulnerabilities

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized read access to a subset of data.

Vulnerability in Oracle Sales Online (component: OSO Other) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, with potential impact on additional products (scope change).

Vulnerability in the Oracle Sales Online product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle Sales Online, requiring human interaction from a person other than the attacker. The vulnerability may also significantly impact additional products (scope change).

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Sales Online.