Threats affecting pkg:maven/com.oracle.apps.framework/search-bean

A vulnerability exists in the Oracle Applications Framework component of Oracle E-Business Suite, specifically in the Search Bean. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to compromise the framework, potentially leading to unauthorized creation, deletion, or modification of critical data. The CVSS 3.1 base score is 8.1, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.