Threats affecting pkg:maven/com.oracle.ebusinesssuite/one-to-one-fulfillment-documents

A vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) affects supported versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with significant confidentiality and availability impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.