Threats affecting pkg:maven/com.oracle.ebusinesssuite/applications-calendar

A vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low privileged attacker with network access via HTTP to compromise the application. The vulnerability enables unauthorized creation, deletion, or modification of critical data and unauthorized read access to some data. The CVSS 3.1 base score is 7.1, indicating a high severity issue affecting confidentiality and integrity.

A vulnerability exists in the Oracle Common Applications Calendar component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and potentially cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on integrity and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.