Threats tagged 'ghsa-67jq-mhm7-hjwr'

CVE-2026-83185 is a vulnerability in the Oracle Common Applications component of Oracle E-Business Suite, specifically in the CRM User Management Framework. It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to potentially compromise the application, requiring user interaction from someone other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible through Oracle Common Applications. The CVSS 3.1 base score is 7.3, indicating a high severity with impacts on confidentiality and integrity but no impact on availability. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for affected versions.