CVE-2026-83443
MediumCVSS 6.5Summary
Vulnerability in Oracle E-Business Suite Oracle Assets product (component: Internal Operations) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Assets accessible data.
Risk Assessment
The risk includes confidentiality breach, potentially leading to exposure of sensitive financial or operational information.
Recommendation
Apply Oracle patches for Oracle Assets and review user privileges to minimize risk.
Other vulnerabilities in Oracle Assets
See all- CVE-2026-60755High
In Oracle Assets (part of Oracle E-Business Suite, versions 12.2.3-12.2.15), a vulnerability in the Internal Operations component allows a high-privileged attacker via HTTP to take over the system.
- CVE-2026-60749High
Vulnerability in Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise data confidentiality and integrity.
Original NVD description (English source)
Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Assets accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).