CVE-2026-83069
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Vulnerability in Oracle Fusion Middleware Control (component: Framework) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can exploit it over HTTP, potentially leading to full takeover. CVSS score is 8.8, indicating high impact on confidentiality, integrity, and availability.
Risk Assessment
The risk includes potential full takeover of Oracle Fusion Middleware Control, compromising all security aspects and causing significant damage.
Recommendation
Update Oracle Fusion Middleware Control to a patched version immediately and monitor logs for suspicious activity.
Other vulnerabilities in Oracle Fusion Middleware Control
See all- CVE-2026-91467Medium
Vulnerability in Oracle Fusion Middleware Control (component Framework) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with physical access can, with user interaction, take over Oracle Fusion Middleware Control.
- CVE-2026-83346Medium
Vulnerability in the Oracle Fusion Middleware Control product (component: Framework), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can exploit it, requiring human interaction, and attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data.
Original NVD description (English source)
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Fusion Middleware Control. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware Control. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS