CVE-2026-83194
HighCVSS 8.8Summary
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Risk Assessment
Successful exploitation can result in full takeover of Oracle Depot Repair, impacting confidentiality, integrity, and availability. The risk is high due to the low privilege level required.
Recommendation
Immediately apply the available Oracle security updates for Oracle Depot Repair and restrict network access to this component.
Other vulnerabilities in Oracle Depot Repair
See all- CVE-2026-83436High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Recall Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized data access and partial denial of service. CVSS 7.1.
- CVE-2026-83433Medium
Vulnerability in Oracle E-Business Suite Oracle Depot Repair product (component: Depot Repair Diagnostics) affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-83432High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83188High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Original NVD description (English source)
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in takeover of Oracle Depot Repair. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).