A vulnerability exists in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on some data. The CVSS 3.1 base score is 7.1, indicating a high severity with significant confidentiality and integrity impacts but no availability impact. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.