Threats affecting pkg:maven/com.oracle.ebusinesssuite/oracle-marketing

CVE-2026-83110 is a vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data within Oracle Marketing. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact but no impact on integrity or availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, providing patches to address it.

A vulnerability exists in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted fixes for this and many other vulnerabilities.