Threats affecting pkg:maven/com.oracle/web-applications-desktop-integrator

CVE-2026-83131 is a vulnerability in Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTPS to compromise the product, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity, with a significant confidentiality impact. Attacks exploiting this vulnerability may also affect additional Oracle products due to scope change. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-70755 is a vulnerability in Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or potentially all data accessible by the application. The vulnerability affects the file download component and has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.