CVE-2026-83436
HighCVSS 7.1Summary
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Recall Management). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized data access and partial denial of service. CVSS 7.1.
Risk Assessment
Risk of unauthorized data access and partial system unavailability, potentially disrupting business operations.
Recommendation
Apply Oracle patches for versions 12.2.3-12.2.15. Restrict access and monitor for anomalies.
Other vulnerabilities in Oracle Depot Repair
See all- CVE-2026-83433Medium
Vulnerability in Oracle E-Business Suite Oracle Depot Repair product (component: Depot Repair Diagnostics) affects versions 12.2.3-12.2.15. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify data.
- CVE-2026-83432High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Estimate and Actual Charges). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Depot Repair, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83194High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.10-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
- CVE-2026-83188High
Vulnerability in Oracle Depot Repair of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a high-privileged attacker with network access via HTTP to compromise Oracle Depot Repair.
Original NVD description (English source)
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Depot Repair. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).