Threats Tagged 'cve-2026-83483'

A vulnerability exists in the Oracle Advanced Benefits product of Oracle E-Business Suite, specifically in the Self-serv What-if Analysis component. It affects supported versions 12.2.3 through 12.2.15. The vulnerability requires high privileges and network access via HTTP to exploit and can lead to a complete takeover of Oracle Advanced Benefits. The CVSS 3.1 base score is 8.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides fixes for affected products.

CVE-2026-83483 is a high-severity vulnerability in Oracle Advanced Benefits, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to a full takeover. The vulnerability has a CVSS 3.1 base score of 8.0, indicating significant confidentiality, integrity, and availability impacts. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides targeted security fixes. Customers are strongly advised to apply the available patches promptly to mitigate the risk.