Threats tagged 'ghsa-jchv-344c-42x4'

A vulnerability exists in the Oracle Application Object Library component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data within the Oracle Application Object Library. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.