Threats affecting pkg:maven/com.oracle.apps.framework/personalization

A high-severity vulnerability (CVE-2026-83329) exists in the Oracle Applications Framework component of Oracle E-Business Suite Personalization. It affects supported versions 12.2.9 through 12.2.15. The vulnerability allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle Applications Framework. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the provided patches promptly to mitigate this risk.

A high-severity vulnerability (CVE-2026-83331) exists in the Oracle Applications Framework component of Oracle E-Business Suite Personalization. It affects supported versions 12.2.9 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle Applications Framework. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.