Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
http://www.securitytracker.com/id/1037038
http://www.securityfocus.com/bid/93738
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html