Oracle Service Fulfillment Manager vulnerabilities

Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.

Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, increasing the risk for the organization.

Vulnerability in Oracle Service Fulfillment Manager (component: Fulfillment Engine) versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and modify it. Requires user interaction, CVSS 7.6.

Vulnerability in Oracle Service Fulfillment Manager (Fulfillment Engine component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.

Vulnerability in Oracle Service Fulfillment Manager (Fulfillment Engine component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Service Fulfillment Manager (component: Fulfillment Engine) versions 12.2.3-12.2.15. Allows a high-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and gain full access to all data.