This vulnerability in Oracle Applications Manager's Diagnostics Interfaces allows an unauthenticated attacker with network access via HTTP to compromise the application. It can result in unauthorized access to critical data or complete exposure of all accessible information, impacting confidentiality as reflected by a CVSS 3.1 Base Score of 7.5.

Oracle Corporation’s Oracle Applications Manager within Oracle E-Business Suite is affected. Supported versions 12.2.3 through 12.2.15 are vulnerable; the flaw resides in the Oracle Diagnostics Interfaces component.

The lack of authentication requirements and a CVSS score of 7.5 indicate a high risk posture. Although an EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the potential for an attacker to craft HTTP requests that exploit the flaw remains significant, making the risk elevated despite the absence of known public exploits.