Authenticated read and modification of application data

Oracle Advanced Collections allows remote authenticated users to read or modify application data through an undisclosed Admin flaw over HTTP. Oracle has not published the affected Admin handler, parameter, or validation failure, so the precise wrong operation on untrusted input remains undisclosed. A low-privilege account is sufficient and no user interaction is required; successful exploitation permits complete reading or modification of accessible collections data but does not interrupt service.