Threats affecting pkg:maven/com.oracle.ebusinesssuite/oracle-product-hub

A vulnerability exists in the Oracle Product Hub component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle Product Hub. The vulnerability has a high severity with a CVSS 3.1 base score of 8.8, impacting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk.