Threats affecting pkg:maven/com.oracle.ebusinesssuite/application-object-library

A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This vulnerability requires high privileges and network access via HTTP to exploit and can lead to a complete takeover of the Oracle Application Object Library. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 8.0. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for affected products.

A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data within the Oracle Application Object Library. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.