CVE-2026-83080

HighCVSS 7.1

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Vulnerability in Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Affects versions 14.5.0.0.0-14.9.0.0.0. Difficult to exploit, requires user interaction, allows low privileged attacker to take over the system.

Risk Assessment

Risk of takeover of Oracle Banking Branch, potentially leading to compromise of confidentiality, integrity, and availability of banking data.

Recommendation

Apply Oracle patches. Educate users about interacting with untrusted content and restrict network privileges.

Other vulnerabilities in Oracle Banking Branch

CVE-2026-87164High
Vulnerability in Oracle Banking Branch (component: Reports) versions 14.5.0.0.0-14.9.0.0.0. A difficult-to-exploit flaw requires a low-privileged attacker with network access via HTTP and user interaction. Successful attacks can result in takeover of the system and may impact additional products (scope change).

Original NVD description (English source)

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Branch. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Banking Branch. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS