Threats affecting pkg:maven/com.oracle/OracleContracts

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.5%	CVE-2026-83482Oracle Contracts · Improper Privilege Management High7.2EPSS 0.5%2026-09-15CVE Database V5CVE-2026-83482 Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-269	CVE Database V5	2026-09-15
High	8.8	EPSS 0.4%	CVE-2026-83479Oracle Contracts · Improper Privilege Management High8.8EPSS 0.4%2026-09-15CVE Database V5CVE-2026-83479 Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-269	CVE Database V5	2026-09-15

Page 1 of 1