Executive brief
Oracle Document Management and Collaboration is a component of Oracle E-Business Suite used to store and manage business documents and enable team collaboration. A flaw in this component allows a low-privileged attacker to gain unauthorized access via the network and take full control of the system, affecting confidentiality, integrity, and availability of stored documents and collaboration functions.
Technical details
The vulnerability exists in the Oracle Document Management and Collaboration product (Internal Operations component) in E-Business Suite versions 12.2.3 through 12.2.15. It is exploitable by a low-privileged attacker with network access via HTTP, requiring no user interaction. Successful exploitation allows an attacker to compromise the affected product and achieve complete takeover, with impacts on confidentiality (data access), integrity (data modification), and availability (service disruption). The attack vector is network-based with low complexity and low privilege requirements.
Affected products
- Oracle Document Management and Collaboration 12.2.3 to 12.2.15
Timeline
- 2026-09-15: disclosed