Threats affecting pkg:maven/com.oracle.ebusinesssuite/one-to-one-fulfillment

CVE-2026-83170 is a vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with access to the physical communication segment attached to the hardware running the product to compromise the system. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for this and many other vulnerabilities. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

A vulnerability exists in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite affecting versions 12.2.3 through 12.2.15. The flaw involves Java Server Issues and allows an unauthenticated attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.

A vulnerability exists in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Oracle One-to-One Fulfillment and potentially cause a partial denial of service. The CVSS 3.1 base score is 7.1, indicating high severity with confidentiality and availability impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.