Threats tagged 'ghsa-vwx6-f846-g5mg'

A high-severity vulnerability exists in the Oracle Customer Interaction History product of Oracle E-Business Suite, specifically affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low-privileged attacker with network access over HTTPS to potentially take over the Oracle Customer Interaction History component. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes patches for affected versions.