Threats Tagged 'cve-2026-83437'

A vulnerability exists in the Oracle Engineering product of Oracle E-Business Suite, specifically in the Change Management component. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Engineering, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.

CVE-2026-83437 is a high-severity vulnerability in Oracle Engineering, part of Oracle E-Business Suite's Change Management component. It affects versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Engineering, potentially leading to unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without integrity or availability loss. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.