Oracle Application Object Library
Monthly
Oracle Application Object Library (AOL), the foundational Core framework component of Oracle E-Business Suite versions 12.2.3 through 12.2.15, permits a network-authenticated low-privileged user to bypass authorization controls and perform unauthorized read, insert, update, or delete operations on data outside their assigned access scope. Tagged as an Authentication Bypass by ENISA EUVD-2026-46560, the flaw is reachable over HTTP with no attack complexity and no user interaction required beyond a valid low-privilege session. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the low-complexity, broadly network-accessible nature of the flaw in a widely deployed enterprise ERP platform warrants prompt application of Oracle's July 2026 Critical Patch Update.
Oracle Application Object Library (AOL), the foundational Core framework component of Oracle E-Business Suite versions 12.2.3 through 12.2.15, permits a network-authenticated low-privileged user to bypass authorization controls and perform unauthorized read, insert, update, or delete operations on data outside their assigned access scope. Tagged as an Authentication Bypass by ENISA EUVD-2026-46560, the flaw is reachable over HTTP with no attack complexity and no user interaction required beyond a valid low-privilege session. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the low-complexity, broadly network-accessible nature of the flaw in a widely deployed enterprise ERP platform warrants prompt application of Oracle's July 2026 Critical Patch Update.