Threats affecting pkg:maven/com.oracle.communications/sepp

A vulnerability in Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) versions 25.2.201 and 26.1.200 allows a low privileged attacker with network access via HTTP to gain unauthorized read and write access to some accessible data. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity with confidentiality and integrity impacts but no availability impact. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes.