Threats affecting pkg:maven/com.oracle.ebusinesssuite/ADPatch

A vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch) affects supported versions 12.2.3 through 12.2.15. This vulnerability allows an unauthenticated attacker with logon access to the infrastructure where Applications DBA executes to compromise the product, requiring user interaction from a third party. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities across multiple products.