Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows.
http://www.securitytracker.com/id/1034726
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html