Threats tagged 'ghsa-xg3f-mxcx-r9qr'

CVE-2026-83140 is a vulnerability in the Oracle Field Service product of Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Oracle Field Service. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with high confidentiality impact but no impact on integrity or availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.