CVE-2026-83090

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to completely take over Oracle Spares Management.

Risk Assessment

Complete takeover of Oracle Spares Management can lead to full compromise of data and services, posing a critical threat to the organization.

Recommendation

Immediately apply Oracle patches and restrict network access to the service, and monitor for unauthorized changes.

Other vulnerabilities in Oracle Spares Management

CVE-2026-46928High
Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTPS to compromise Oracle Spares Management. Affected versions are 12.2.3-12.2.15.

Original NVD description (English source)

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares Management. Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS