A vulnerability exists in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. The flaw allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update.