Threats affecting pkg:maven/com.oracle.ebusinesssuite/oracle-sales-online

A vulnerability exists in the Oracle Sales Online product of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Sales Online, potentially resulting in unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.