Oracle Bills Of Material
Monthly
Product takeover in Oracle Bills of Material (Bill Issues component) of Oracle E-Business Suite 12.2.3 through 12.2.15 lets a low-privileged attacker with HTTP network access fully compromise the module, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 8.8 with high impact across confidentiality, integrity, and availability, meaning an authenticated user can read, alter, and destroy Bills of Material data. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle EBS is a recurring high-value target for post-authentication attacks.
Product takeover in Oracle Bills of Material (Bill Issues component) of Oracle E-Business Suite 12.2.3 through 12.2.15 lets a low-privileged attacker with HTTP network access fully compromise the module, per Oracle's July 2026 Critical Patch Update. The CVSS 3.1 base score is 8.8 with high impact across confidentiality, integrity, and availability, meaning an authenticated user can read, alter, and destroy Bills of Material data. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Oracle EBS is a recurring high-value target for post-authentication attacks.