CVE-2026-83119

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.6-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle User Management.

Risk Assessment

A low privileged attacker can take over Oracle User Management, impacting confidentiality, integrity, and availability. The CVSS score of 8.8 indicates critical risk.

Recommendation

Immediately apply the Oracle patches for versions 12.2.6-12.2.15 or upgrade to a patched version. Restrict network access to Oracle User Management.

Other vulnerabilities in Oracle User Management

CVE-2026-83189High
Vulnerability in Oracle User Management of Oracle E-Business Suite (component: Proxy User Delegation) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle User Management.

Original NVD description (English source)

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in takeover of Oracle User Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS