Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.2 and 12.1.3 allows remote authenticated users to affect confidentiality, related to REST Services (Menu, LOV).
https://exchange.xforce.ibmcloud.com/vulnerabilities/72479
http://www.securityfocus.com/bid/51477
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html