CVE-2026-83165
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Vulnerability in Oracle Customer Interaction History (component: User Interface) in versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker via HTTPS to take over the system.
Risk Assessment
Risk of complete takeover of Oracle Customer Interaction History, potentially leading to loss of confidentiality, integrity, and availability.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15. Restrict access to the user interface.
Other vulnerabilities in Oracle Customer Interaction History
See all- CVE-2017-3442High
A vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
- CVE-2017-3441High
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires human interaction from a person other than the attacker, which may lead to unauthorized access to critical data.
- CVE-2017-3440High
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise data. It requires interaction from a third party, increasing the risk of unauthorized access to critical data.
- CVE-2016-5595High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5593High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5592High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.
- CVE-2016-5591High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-5587High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity.
- CVE-2016-3512High
Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Function Security.
- CVE-2026-83166High
Vulnerability in Oracle Customer Interaction History (component: Outcome-Result) in versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker via HTTP to gain unauthorized access to critical data, with potential impact on other products.
Original NVD description (English source)
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Customer Interaction History. Successful attacks of this vulnerability can result in takeover of Oracle Customer Interaction History. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS