CVE-2026-83429: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Signal Repository accessible data. in Oracle Corporation Oracle Demand
CVE-2026-83429 is a high-severity vulnerability in Oracle Demand Signal Repository versions 12.2.3 through 12.2.15. It allows a low-privileged attacker with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
AI Analysis
Technical Summary
This vulnerability affects Oracle Demand Signal Repository within Oracle E-Business Suite (component: Internal Operations) in versions 12.2.3 to 12.2.15. It is exploitable remotely over the network with low attack complexity and requires low privileges, without user interaction. Successful exploitation can result in unauthorized access to critical data, including the ability to create, delete, or modify data. The CVSS 3.1 base score is 8.1, reflecting high confidentiality and integrity impacts. Oracle has included a fix for this vulnerability in their September 2026 Critical Security Patch Update.
Potential Impact
An attacker with network access and low privileges can exploit this vulnerability to gain unauthorized access to critical data within Oracle Demand Signal Repository. This includes the ability to create, delete, or modify data, which compromises data confidentiality and integrity. There is no impact on system availability reported.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability as part of the September 2026 Critical Security Patch Update. Users of Oracle Demand Signal Repository versions 12.2.3 through 12.2.15 are strongly advised to apply the available patches promptly to remediate this vulnerability. Oracle recommends remaining on actively supported versions and applying security patches without delay to prevent exploitation.
CVE-2026-83429: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demand Signal Repository. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Demand Signal Repository accessible data as well as unauthorized access to critical data or complete access to all Oracle Demand Signal Repository accessible data. in Oracle Corporation Oracle Demand
Description
CVE-2026-83429 is a high-severity vulnerability in Oracle Demand Signal Repository versions 12.2.3 through 12.2.15. It allows a low-privileged attacker with network access via HTTP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
CVSS v3.1
Score 8.1high
Affected software
Oracle Corporation
Oracle Demand Signal Repository
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Oracle Demand Signal Repository within Oracle E-Business Suite (component: Internal Operations) in versions 12.2.3 to 12.2.15. It is exploitable remotely over the network with low attack complexity and requires low privileges, without user interaction. Successful exploitation can result in unauthorized access to critical data, including the ability to create, delete, or modify data. The CVSS 3.1 base score is 8.1, reflecting high confidentiality and integrity impacts. Oracle has included a fix for this vulnerability in their September 2026 Critical Security Patch Update.
Potential Impact
An attacker with network access and low privileges can exploit this vulnerability to gain unauthorized access to critical data within Oracle Demand Signal Repository. This includes the ability to create, delete, or modify data, which compromises data confidentiality and integrity. There is no impact on system availability reported.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability as part of the September 2026 Critical Security Patch Update. Users of Oracle Demand Signal Repository versions 12.2.3 through 12.2.15 are strongly advised to apply the available patches promptly to remediate this vulnerability. Oracle recommends remaining on actively supported versions and applying security patches without delay to prevent exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-08-31T15:40:57.358Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cspusep2026.html","vendor":"Oracle"}]
Threat ID: 6aa9a84855bf5e2cf55381b7
Added to database: 09/15/2026, 20:19:20 UTC
Last enriched: 09/15/2026, 23:07:33 UTC
Last updated: 09/16/2026, 00:49:58 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.