A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite affecting versions 12.2.3 through 12.2.15. This flaw allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle Application Object Library. The vulnerability has a high CVSS 3.1 base score of 8.8, indicating severe confidentiality, integrity, and availability impacts. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.