High-privilege local data access and tampering

Improper access control in Oracle SDP Number Portability 12.2.3 through 12.2.15 allows local users to read and modify data. Oracle and NVD place the flaw in the Internal Operations component, but the public record does not disclose the affected code path or the operation that fails to enforce access restrictions. Exploitation requires high-privileged logon access to the host where the product runs and can lead to unauthorized creation, deletion, or modification of critical data, read access to a subset of accessible data, and partial service interruption, with scope changed beyond the vulnerable product.