Threats affecting pkg:maven/com.oracle/ebusiness-suite-oracle-process-manufacturing-product-development

CVE-2026-46918 is a critical vulnerability in Oracle Process Manufacturing Product Development (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to fully compromise the product, potentially impacting additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has released a Critical Security Patch Update in June 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.