An Oracle EDI Gateway vulnerability allows an attacker with network access via HTTP to execute actions with high privileges. The flaw can lead to full compromise of the gateway, enabling an attacker to read, modify, or delete any data and potentially disrupt integrated business processes. The issue is captured by a CVSS 3.1 score of 7.2, indicating moderate to high impact on confidentiality, integrity, and availability.

The affected product is Oracle EDI Gateway, part of Oracle E‑Business Suite. Versions 12.2.3 through 12.2.15 are known to be vulnerable. No other Oracle products or versions are listed as impacted.

The vulnerability is remotely exploitable over HTTP without authentication, and the CVSS vector indicates an attacker requires high privileged roles to succeed. Because the EPSS score is not available and the flaw is not listed in CISA KEV, the precise likelihood of exploitation is uncertain, but the potential for takeover represents a significant risk. The attack vector is inferred as HTTP traffic based on the description, and the flaw requires privileged access privileges to achieve exploitation.