Threats affecting pkg:maven/oracle/financials-for-emea

CVE-2026-46969 is a high-severity vulnerability in Oracle Financials for EMEA, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15 and allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to full takeover of Oracle Financials for EMEA. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory. No explicit patch or fix version is stated in the advisory content, but Oracle strongly recommends applying the Critical Security Patch Update promptly to mitigate the risk. Until patches are applied, risk reduction may be possible by blocking required network protocols or removing unnecessary privileges, though these may impact functionality.