Threats tagged 'ghsa-3779-fj76-32x6'

CVE-2026-83170 is a vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents) affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with access to the physical communication segment attached to the hardware running the product to compromise the system. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for this and many other vulnerabilities. Oracle strongly recommends applying the available patches promptly to mitigate the risk.