Proposals
Monthly
Full takeover of Oracle Proposals (Oracle E-Business Suite component) is achievable by a high-privileged, network-adjacent attacker over HTTP, resulting in complete compromise of confidentiality, integrity, and availability. Affected deployments span versions 12.2.3 through 12.2.15 of Oracle E-Business Suite, a widely deployed enterprise ERP platform. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; Oracle addressed this in the August 2026 Critical Patch Update.
Full takeover of Oracle Proposals (Oracle E-Business Suite component) is achievable by a high-privileged, network-adjacent attacker over HTTP, resulting in complete compromise of confidentiality, integrity, and availability. Affected deployments span versions 12.2.3 through 12.2.15 of Oracle E-Business Suite, a widely deployed enterprise ERP platform. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; Oracle addressed this in the August 2026 Critical Patch Update.