Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). (CVE-2026-83200)
CVE-2026-83200 is a vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via Oracle Net to gain unauthorized access to critical data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
AI Analysis
Technical Summary
This vulnerability in Oracle Process Manufacturing Intelligence allows an attacker with low privileges and network access via Oracle Net to compromise the product and access critical data. The affected versions are 12.2.3 through 12.2.15 of Oracle E-Business Suite. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. Oracle has released patches as part of the September 2026 Critical Security Patch Update addressing this and many other vulnerabilities.
Potential Impact
Successful exploitation can lead to unauthorized access to critical data within Oracle Process Manufacturing Intelligence. There is no impact on data integrity or availability. The vulnerability requires network access and low privileges, making it moderately exploitable. No known exploits in the wild have been reported.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to remediate this issue. Oracle recommends staying on actively supported versions and applying security patches without delay to prevent exploitation.
Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). (CVE-2026-83200)
Description
CVE-2026-83200 is a vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle E-Business Suite (component: Internal Operations). It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via Oracle Net to gain unauthorized access to critical data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
CVSS v3.1
Score 6.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Oracle Process Manufacturing Intelligence allows an attacker with low privileges and network access via Oracle Net to compromise the product and access critical data. The affected versions are 12.2.3 through 12.2.15 of Oracle E-Business Suite. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. Oracle has released patches as part of the September 2026 Critical Security Patch Update addressing this and many other vulnerabilities.
Potential Impact
Successful exploitation can lead to unauthorized access to critical data within Oracle Process Manufacturing Intelligence. There is no impact on data integrity or availability. The vulnerability requires network access and low privileges, making it moderately exploitable. No known exploits in the wild have been reported.
Mitigation Recommendations
Oracle has released a security patch for this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to remediate this issue. Oracle recommends staying on actively supported versions and applying security patches without delay to prevent exploitation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pxr3-v75f-hhrx
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-83200"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaa07df55bf5e2cf5ea3326
Added to database: 09/16/2026, 03:07:11 UTC
Last enriched: 09/16/2026, 04:16:32 UTC
Last updated: 09/16/2026, 05:01:22 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.