CVE-2026-83189

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in Oracle User Management of Oracle E-Business Suite (component: Proxy User Delegation) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle User Management.

Risk Assessment

Successful exploitation can result in full takeover of Oracle User Management, impacting confidentiality, integrity, and availability. The risk is high due to the low privilege level required.

Recommendation

Immediately apply the available Oracle security updates for Oracle User Management and restrict network access to this component.

Other vulnerabilities in Oracle User Management

CVE-2026-83119High
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.6-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle User Management.

Original NVD description (English source)

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in takeover of Oracle User Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS