Threats affecting pkg:maven/com.oracle/ebusiness-site-hub

CVE-2026-83130 is a vulnerability in Oracle Site Hub versions 12.2.3 through 12.2.15 that allows a low privileged attacker with network access via HTTP to compromise the system. Exploitation can lead to unauthorized creation, deletion, or modification of critical data or all accessible data within Oracle Site Hub, as well as unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality and integrity but no impact on availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Customers are strongly advised to apply the relevant patches promptly to mitigate the risk.