CVE-2026-83452

CriticalCVSS 9.8

Published: 15/09/2026(UTC)Updated: 15/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Summary

Vulnerability in Oracle Document Management and Collaboration (component: Internal Operations) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.

Risk Assessment

Critical risk — an attacker can take over Oracle Document Management and Collaboration, compromising confidentiality, integrity, and availability.

Recommendation

Immediately apply Oracle patches and restrict HTTP access to trusted sources.

Other vulnerabilities in Oracle Document Management and Collaboration

CVE-2026-61271High
Vulnerability in Oracle Document Management and Collaboration (versions 12.2.3-12.2.15) allows an unauthenticated attacker via HTTP to perform unauthorized modification, read access, and partial denial of service. CVSS 7.3.

Original NVD description (English source)

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).