Threats tagged 'ghsa-p5w4-8gp4-xm98'

A high-severity vulnerability (CVE-2026-83136) exists in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). It affects supported versions 12.2.3 through 12.2.15. The flaw allows a low-privileged attacker with network access via HTTP to potentially take over Oracle Spares Management. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.