CVE-2026-83121
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Marketing.
Risk Assessment
A low privileged attacker can take over Oracle Marketing, impacting confidentiality, integrity, and availability. The CVSS score of 8.8 indicates critical risk.
Recommendation
Immediately apply the Oracle patches for versions 12.2.3-12.2.15 or upgrade to a patched version. Restrict network access to Oracle Marketing.
Other vulnerabilities in Oracle Marketing
See all- CVE-2017-10171High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, which may lead to unauthorized access to critical data.
- CVE-2017-3356High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction, increasing the risk of unauthorized access to critical data.
- CVE-2017-3355High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, which can lead to unauthorized access to critical data.
- CVE-2017-3347High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires interaction from a person other than the attacker.
- CVE-2017-3345High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized creation, deletion, or modification of data.
- CVE-2017-3342High
Vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker.
- CVE-2017-3337High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
- CVE-2017-3358High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction and may significantly impact additional products.
- CVE-2017-3357High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker.
- CVE-2017-3354High
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products.
Original NVD description (English source)
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS