Threats Tagged 'cve-2026-83438'

A vulnerability exists in the Oracle Engineering product of Oracle E-Business Suite (component: Internal Operations) affecting supported versions 12.2.3 through 12.2.15. The flaw allows a low privileged attacker with network access via HTTP to potentially compromise Oracle Engineering, leading to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update and strongly recommends applying the provided patches promptly.

CVE-2026-83438 is a high-severity vulnerability in Oracle Engineering within the Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise Oracle Engineering, potentially impacting additional products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all Oracle Engineering accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.