The vulnerability exists in Oracle E-Business Suite's Pasta component, specifically Internal Operations. It allows a low privileged attacker with network access via HTTP to compromise the application, potentially leading to a full takeover. The impact encompasses all three core security objectives—confidentiality, integrity, and availability—making it a high-severity flaw. The weakness is a failure in access control that permits unauthorized control over the system.

Oracle Corporation's Pasta product for E-Business Suite, versions 12.2.3 through 12.2.15, is affected.

With a CVSS 3.1 Base Score of 7.5, the vulnerability is considered high. No EPSS score is available, but the lack of prior public exploitation and absence from the CISA KEV list suggest a moderate likelihood of exploitation. The attack vector is inferred to be remote, via HTTP, requiring only low privileges and no user interaction. If an attacker succeeds, they could gain full control over Pasta, enabling sabotage, data exfiltration, or further lateral movement within the network.