Threats affecting pkg:maven/com.oracle/in-memory-cost-management-discrete-industries

CVE-2026-46930 is a critical vulnerability in Oracle In-Memory Cost Management for Discrete Industries (part of Oracle E-Business Suite) versions 12.2.12 through 12.2.15. It allows an unauthenticated attacker with network access via HTTPS to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without requiring user interaction or privileges. Oracle has published a Critical Security Patch Update advisory recommending prompt application of security patches to mitigate this risk.