Threats affecting pkg:maven/com.oracle.financialservices.oraclebanking/oracle-banking-corporate-lending

A vulnerability exists in Oracle Banking Corporate Lending (component: Core) affecting versions 14.5.0.0.0 through 14.9.0.0.0. The flaw allows an unauthenticated attacker with physical access to the communication segment of the hardware running the product to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.