Threats Tagged 'cve-2026-83484'

A vulnerability exists in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to potentially compromise the system, resulting in unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 7.1, indicating a high severity with confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.

CVE-2026-83484 is a vulnerability in Oracle US Federal Human Resources component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with impacts on confidentiality and integrity. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, and strongly recommends applying patches promptly.