A vulnerability exists in the Oracle Document Management and Collaboration component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This vulnerability allows a high privileged attacker with network access via HTTP to potentially take over the affected component. The CVSS 3.1 base score is 7.2, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities across multiple products. Customers are strongly advised to apply the available patches promptly.