Threats affecting pkg:maven/com.oracle.ebusiness/audience

A vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affects supported versions 12.2.3 through 12.2.15. This vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially resulting in a full takeover of the product. The CVSS 3.1 base score is 7.2, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.