Threats tagged 'ghsa-7x7x-4g2x-5q9v'

A vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affects supported versions 12.2.3 through 12.2.15. This vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially resulting in a full takeover of the product. The CVSS 3.1 base score is 7.2, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.