A vulnerability exists in the Oracle Marketing product of Oracle E-Business Suite (component: Audience) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Marketing, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities across multiple Oracle products.