Threats affecting pkg:maven/com.oracle.utilities/NetworkManagementSystem

A vulnerability exists in the Oracle Utilities Network Management System component of Oracle Utilities Applications. It affects multiple supported versions ranging from 2.4.0.1.0 through 25.12.0.0.3. The flaw allows a low privileged attacker with logon access to the system infrastructure to compromise the Oracle Utilities Network Management System, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.