Threats affecting pkg:maven/oracle/outsourced-mfg-for-discrete-industries

CVE-2026-46972 is a high-severity vulnerability in Oracle Outsourced Mfg for Discrete Industries, part of Oracle E-Business Suite. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Oracle strongly recommends applying the patch promptly to mitigate risk. Until patched, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.