This vulnerability exists in the Web UI component of Oracle Financial Services Enterprise Case Management. It is exploitable remotely over the network with low attack complexity and requires low privileges, without user interaction. Successful exploitation can result in complete compromise of the affected system, impacting confidentiality, integrity, and availability. The CVSS vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The affected versions are 8.0.8.2 and 8.1.2.11. Oracle's August 2026 Critical Security Patch Update advisory references many patches but does not explicitly confirm a patch for this CVE in the provided excerpt.

An attacker with network access and low privileges can exploit this vulnerability to take over Oracle Financial Services Enterprise Case Management, resulting in full compromise of confidentiality, integrity, and availability of the system.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Although the advisory references a Critical Security Patch Update released in August 2026, the patch status for this specific vulnerability is not explicitly confirmed in the provided content. Users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch availability and installation instructions. Until a patch is confirmed and applied, restrict network access to the affected service where possible.