CVE-2026-83124
HighCVSS 8.8Summary
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Sales Online.
Risk Assessment
A low privileged attacker can take over Oracle Sales Online, impacting confidentiality, integrity, and availability. The high CVSS score of 8.8 indicates critical risk to the organization.
Recommendation
Immediately apply the available Oracle patches for versions 12.2.3-12.2.15 or upgrade to a patched version. Restrict network access to Oracle Sales Online to trusted networks.
Other vulnerabilities in Oracle Sales Online
See all- CVE-2026-83172High
Vulnerability in Oracle Sales Online (component: OSO Other) of Oracle E-Business Suite. Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, with potential impact on additional products (scope change).
- CVE-2026-83126High
Vulnerability in the Oracle Sales Online product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker with network access via HTTP can compromise Oracle Sales Online, requiring human interaction from a person other than the attacker. The vulnerability may also significantly impact additional products (scope change).
Original NVD description (English source)
Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. Successful attacks of this vulnerability can result in takeover of Oracle Sales Online. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).