Threats tagged 'ghsa-pq8g-pqh9-8899'

CVE-2026-83002 is a vulnerability in Oracle Access Manager's Authentication Engine affecting versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via HTTP to potentially take over Oracle Access Manager. The vulnerability has a high CVSS score of 8.5, impacting confidentiality, integrity, and availability. Successful exploitation could also affect additional Oracle products due to scope change. Oracle has released patches for this vulnerability as part of its September 2026 Critical Security Patch Update.