Threats tagged 'ghsa-jq4x-mhpp-3rq9'

A vulnerability exists in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite affecting versions 12.2.3 through 12.2.15. The flaw involves Java Server Issues and allows an unauthenticated attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.