Threats Tagged 'cve-2026-83170'

CVE-2026-83170 is a vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with access to the physical communication segment attached to the hardware running the product to compromise the system. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for this and many other vulnerabilities. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-83170 is a high-severity vulnerability in Oracle One-to-One Fulfillment, part of Oracle E-Business Suite. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with access to the physical communication segment of the hardware running the software to compromise and potentially take over Oracle One-to-One Fulfillment. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.