Threats affecting pkg:maven/com.oracle.financialservicesapplications/oracle-banking-origination

A vulnerability exists in the Oracle Banking Origination product of Oracle Financial Services Applications, specifically in the Onboarding Batch Processes component. The affected versions range from 14.5.0.0.0 through 14.9.0.0.0. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Oracle Banking Origination system. The CVSS 3.1 base score is 7.5, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update and recommends applying the provided patches promptly.