Threats tagged 'ghsa-fv3q-cwfm-wgxp'

A vulnerability in Oracle Applications Manager component of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low privileged attacker with network access via HTTPS to compromise the application. The vulnerability has a high CVSS score of 8.8, impacting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk of compromise.