Anil Aravind

**Name of the Vulnerable Software and Affected Versions** Oracle E-Business Suite Oracle iSupplier Portal versions 12.1.3 and 12.2.5 through 12.2.9 **Description** The issue is related to a lack of protection for service data in the Oracle iSupplier Portal product. It allows an unauthenticated attacker with network access via HTTP to compromise the Oracle iSupplier Portal, resulting in unauthorized read access to a subset of Oracle iSupplier Portal accessible data. **Recommendations** For versions 12.1.3, update to a version that includes the necessary security fixes. For versions 12.2.5 through 12.2.9, update to a version that includes the necessary security fixes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.