E Business Tax
Monthly
Oracle E-Business Tax versions 12.2.3 through 12.2.15 allows a low-privileged local attacker to compromise data integrity and trigger a repeatable denial-of-service condition in the Internal Operations component. Successful exploitation enables unauthorized creation, deletion, or modification of critical tax data, and can cause the application to hang or crash completely, disrupting core business tax processing workflows. No public exploit has been identified at time of analysis, though the low complexity and low privilege requirements make this an accessible target for any authenticated local user on the affected infrastructure.
Sensitive data compromise in Oracle E-Business Tax (component: Internal Operations), part of Oracle E-Business Suite releases 12.2.3 through 12.2.15, allows a low-privileged attacker with HTTP network access to read, create, delete, or modify all data accessible to the E-Business Tax module. Oracle rates it CVSS 3.1 8.1 with high confidentiality and integrity impact but no availability impact, and it is remediated in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Local privilege-driven takeover in Oracle E-Business Tax (a component of Oracle E-Business Suite 12.2.3 through 12.2.15) lets a low-privileged attacker who can log on to the host infrastructure fully compromise the E-Business Tax module. Oracle rates it CVSS 3.1 7.8 with complete confidentiality, integrity, and availability impact and describes it as easily exploitable. No public exploit was identified at time of analysis, and it is not listed in CISA KEV.
Remote data compromise in Oracle E-Business Tax (Oracle E-Business Suite, Internal Operations component) allows a low-privileged authenticated attacker with HTTP network access to read, create, delete, or modify all E-Business Tax accessible data. Affecting supported versions 12.2.3 through 12.2.15, the flaw carries a CVSS 3.1 base score of 8.1 with high confidentiality and integrity impact but no availability impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; it was reported by Oracle's own security team and addressed in the July 2026 Critical Patch Update.
Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.
Oracle E-Business Tax versions 12.2.3 through 12.2.15 allows a low-privileged local attacker to compromise data integrity and trigger a repeatable denial-of-service condition in the Internal Operations component. Successful exploitation enables unauthorized creation, deletion, or modification of critical tax data, and can cause the application to hang or crash completely, disrupting core business tax processing workflows. No public exploit has been identified at time of analysis, though the low complexity and low privilege requirements make this an accessible target for any authenticated local user on the affected infrastructure.
Sensitive data compromise in Oracle E-Business Tax (component: Internal Operations), part of Oracle E-Business Suite releases 12.2.3 through 12.2.15, allows a low-privileged attacker with HTTP network access to read, create, delete, or modify all data accessible to the E-Business Tax module. Oracle rates it CVSS 3.1 8.1 with high confidentiality and integrity impact but no availability impact, and it is remediated in the July 2026 Critical Patch Update. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Local privilege-driven takeover in Oracle E-Business Tax (a component of Oracle E-Business Suite 12.2.3 through 12.2.15) lets a low-privileged attacker who can log on to the host infrastructure fully compromise the E-Business Tax module. Oracle rates it CVSS 3.1 7.8 with complete confidentiality, integrity, and availability impact and describes it as easily exploitable. No public exploit was identified at time of analysis, and it is not listed in CISA KEV.
Remote data compromise in Oracle E-Business Tax (Oracle E-Business Suite, Internal Operations component) allows a low-privileged authenticated attacker with HTTP network access to read, create, delete, or modify all E-Business Tax accessible data. Affecting supported versions 12.2.3 through 12.2.15, the flaw carries a CVSS 3.1 base score of 8.1 with high confidentiality and integrity impact but no availability impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; it was reported by Oracle's own security team and addressed in the July 2026 Critical Patch Update.
Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.