Threats tagged 'ghsa-c3h7-r2g6-g3mg'

A vulnerability exists in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to cause unauthorized creation, deletion, or modification of critical data and to cause a denial of service by hanging or crashing the application. The CVSS 3.1 base score is 6.8, indicating a medium severity with impacts on integrity and availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.