CVE-2026-83433
MediumCVSS 6.5Summary
Vulnerability in Oracle E-Business Suite Oracle Depot Repair product (component: Depot Repair Diagnostics) affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.
Risk Assessment
The risk includes confidentiality and integrity breach, potentially leading to manipulation of repair data and serious operational consequences.
Recommendation
Apply Oracle patches for Oracle Depot Repair and restrict high-privileged user permissions.
Other vulnerabilities in Oracle Depot Repair
See all- CVE-2026-83436High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Recall Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized data access and partial denial of service. CVSS 7.1.
- CVE-2026-83432High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83194High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
- CVE-2026-83188High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Original NVD description (English source)
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Depot Repair Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Depot Repair accessible data as well as unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).