Threats affecting pkg:maven/com.oracle/fusion-middleware-adf-shared-components

A vulnerability in Oracle JDeveloper component of Oracle Fusion Middleware (ADF Shared Components) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to cause unauthorized modification of critical data or cause denial of service by crashing the application. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on integrity and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.