A vulnerability exists in the Oracle Bills of Material product within Oracle E-Business Suite (component: Setup Workbench) affecting versions 12.2.3 through 12.2.15. This vulnerability requires high privileges and network access via HTTP to exploit and can lead to a complete takeover of the Oracle Bills of Material component. The vulnerability impacts confidentiality, integrity, and availability and has a CVSS 3.1 base score of 8.0. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.