CVE-2026-83130

HighCVSS 7.1

Published: 15/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in the Oracle Site Hub product (Internal Operations component) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A low privileged authenticated attacker via HTTP can create, delete, or modify critical data and gain unauthorized read access to a subset of it. The vulnerability is easily exploitable.

Risk Assessment

An attacker can modify or delete critical data in Oracle Site Hub and gain access to a subset of data. This leads to integrity and confidentiality breaches.

Recommendation

Apply the Oracle security updates for versions 12.2.3-12.2.15 and verify user privileges in Oracle Site Hub. Monitor for unusual data operations in the Internal Operations component.

Other vulnerabilities in Oracle Site Hub

CVE-2026-60697Medium
Vulnerability in Oracle Site Hub (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, modify access to some data, and cause a partial denial of service (DoS).

Original NVD description (English source)

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Site Hub accessible data as well as unauthorized read access to a subset of Oracle Site Hub accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS