Threats affecting pkg:maven/com.oracle/Oracle-iSupport

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.6	EPSS 0.4%	CVE-2026-60826Oracle iSupport · Improper Access Control Medium6.6EPSS 0.4%2026-07-21CVE Database V5CVE-2026-60826 Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-07-21
Medium	6.6	EPSS 0.4%	CVE-2026-60825Oracle iSupport · Improper Access Control Medium6.6EPSS 0.4%2026-07-21CVE Database V5CVE-2026-60825 Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-07-21
Critical	9.1	EPSS 0.5%	CVE-2026-46945Oracle iSupport · Improper Access Control Critical9.1EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46945 Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. While the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-284	CVE Database V5	2026-06-16
Critical	9.1	EPSS 0.5%	CVE-2026-46944Oracle iSupport · Improper Access Control Critical9.1EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46944 Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. While the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-284	CVE Database V5	2026-06-16

Page 1 of 1