CVE Catalog

CVE-2026-83114

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Quality.

Risk Assessment

Could lead to full takeover of Oracle Quality, impacting confidentiality, integrity and availability. Exploitation requires high complexity.

Recommendation

Apply the available Oracle security updates for versions 12.2.3-12.2.15 and restrict network access to Oracle Quality.

Other vulnerabilities in Oracle Quality

See all
Original NVD description (English source)

Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in takeover of Oracle Quality. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS