Threats affecting pkg:maven/com.oracle.ebusinesssuite/common-applications

CVE-2026-83185 is a vulnerability in the Oracle Common Applications component of Oracle E-Business Suite, specifically in the CRM User Management Framework. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to potentially compromise the application, requiring user interaction from someone other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible through Oracle Common Applications. The CVSS 3.1 base score is 7.3, indicating a high severity with impacts on confidentiality and integrity but no impact on availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.

A vulnerability exists in the Oracle Common Applications product of Oracle E-Business Suite, specifically in the CRM User Management Framework component. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a high privileged attacker with network access via HTTP to compromise the application, potentially resulting in full takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.