Pharkphoom Phongnusont

The issue is related to insufficient input validation in the Diagnostics component of the Oracle Enterprise Command Center Framework. This can be exploited by a remote attacker to gain unauthorized access to protected information via the HTTP protocol. Successful attacks can result in unauthorized read access to a subset of accessible data.

The issue is related to insufficient input validation in the MS Excel Specific component of Oracle Web Applications Desktop Integrator, part of the Oracle E-Business Suite. This vulnerability can be easily exploited by a low-privileged attacker with network access via HTTP, requiring human interaction from a person other than the attacker. Successful attacks can result in unauthorized update, insert, or delete access to some of Oracle Web Applications Desktop Integrator's accessible data, as well as unauthorized read access to a subset of the data. Additionally, it can cause a partial denial of service (partial DOS) of Oracle Web Applications Desktop Integrator.