CVE-2026-83076
MediumCVSS 6.8Summary
Vulnerability in Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle HR Intelligence (though difficult to exploit), leading to unauthorized creation, deletion, or modification of critical data and complete denial of service.
Risk Assessment
Risk of integrity and availability breach – attacker may modify or delete data and cause system crashes, potentially disrupting HR operations.
Recommendation
Apply Oracle patches and strengthen access controls to the HR Intelligence system.
Other vulnerabilities in Oracle HR Intelligence
See all- CVE-2026-46970High
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.
- CVE-2026-46922High
A vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.
Original NVD description (English source)
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HR Intelligence accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle HR Intelligence. CVSS 3.1 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H).