Threats affecting pkg:maven/com.oracle.financialservices.oraclebanking/oracle-banking-branch

CVE-2026-87164 is a vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications affecting versions 14.5.0.0.0 through 14.9.0.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to full takeover of Oracle Banking Branch and may impact additional products. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with confidentiality, integrity, and availability impacts. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update and strongly recommends applying the patches promptly.