CVE-2026-83114
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Quality.
Risk Assessment
Could lead to full takeover of Oracle Quality, impacting confidentiality, integrity and availability. Exploitation requires high complexity.
Recommendation
Apply the available Oracle security updates for versions 12.2.3-12.2.15 and restrict network access to Oracle Quality.
Other vulnerabilities in Oracle Quality
See all- CVE-2026-83113High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to and modify data.
- CVE-2026-62525Medium
A vulnerability in Oracle Quality (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
- CVE-2026-60855High
Vulnerability in Oracle Quality (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quality.
- CVE-2026-60854High
Vulnerability in Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data, full access to all Oracle Quality data, unauthorized update/insert/delete of some data, and partial denial of service. Attacks may impact additional products (scope change). CVSS 8.2 (Confidentiality, Integrity, Availability).
- CVE-2026-46952High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality.
- CVE-2026-46951High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) allows a low privileged attacker with network access via HTTP to compromise Oracle Quality. This vulnerability can be easily exploited in versions 12.2.3-12.2.15.
Original NVD description (English source)
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in takeover of Oracle Quality. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

