Threats affecting pkg:maven/com.oracle.ebusinesssuite/Oracle-Bills-of-Material

A high-severity vulnerability exists in the Oracle Bills of Material product within Oracle E-Business Suite (component: Setup Workbench). This vulnerability affects supported versions 12.2.3 through 12.2.15 and allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle Bills of Material component. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.