A vulnerability exists in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Oracle Depot Repair component. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities across multiple products.