Two critical security vulnerabilities discovered in Oracle’s E-Business Suite (EBS) could allow attackers to take full control over a company’s entire enterprise resource planning (ERP) solution. If successfully exploited in an attack, the two security flaws enable threat actors to avoid detection while printing bank checks and making electronic fund transfers. Onapsis Research Labs reported the issues to the Oracle Security Response Team in December 2018 and helped fix the vulnerabilities with patches released as part of Oracle’s April 2019 Critical Patch Update Advisory.
Source: https://www.bleepingcomputer.com/news/security/thousands-of-enterprises-at-risk-due-to-oracle-ebs-critical-flaws/