Oracle E-Business Suite Vulnerabilities Patched: 410 Fixes, Four Critical CVSS 9.1-9.8 (advisories.ncsc.nl)

• 410 vulnerabilities patched
• Four critical with CVSS 9.1-9.8
• Highest 9.8 allows unauthenticated takeover via HTTP
• Versions 12.2.3 to 12.2.15 affected
• Products not designed for public access

"Oracle has released patches addressing 410 vulnerabilities in Oracle E-Business Suite versions 12.2.3 to 12.2.15. Four of the vulnerabilities are critical with CVSS scores ranging from 9.1 to 9.8, with the highest (9.8) allowing unauthenticated attackers to take over Work in Process via HTTP. However, the products are not designed for public access, limiting widespread exploitation."