Threats tagged 'ghsa-gfcg-8qfg-gwfq'

A vulnerability exists in the Oracle Common Applications Calendar component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows a low-privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data and potentially cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on integrity and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.