CVE-2026-83432
HighCVSS 8.1Summary
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
Risk Assessment
Risk of unauthorized access and modification of critical data, potentially compromising integrity and confidentiality.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15. Restrict access for low-privileged users.
Other vulnerabilities in Oracle Depot Repair
See all- CVE-2026-83436High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Recall Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized data access and partial denial of service. CVSS 7.1.
- CVE-2026-83433Medium
Vulnerability in Oracle E-Business Suite Oracle Depot Repair product (component: Depot Repair Diagnostics) affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-83194High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
- CVE-2026-83188High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Original NVD description (English source)
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Depot Repair accessible data as well as unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).