CVE-2026-83481
HighCVSS 7.2Summary
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
Risk Assessment
Risk of full system takeover, including compromise of confidentiality, integrity, and availability.
Recommendation
Apply patches provided by Oracle for Oracle E-Business Suite. Restrict network access and control user privileges.
Other vulnerabilities in Oracle Contracts
See all- CVE-2026-83482High
Vulnerability in Oracle Contracts (component: Internal Operations) of Oracle E-Business Suite. Affects versions 12.2.14-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Contracts.
- CVE-2026-83479High
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.14-12.2.15. Easily exploitable by a low privileged attacker with network access via HTTP, leading to takeover of Oracle Contracts. CVSS 3.1 Base Score 8.8.
Original NVD description (English source)
Vulnerability in the Oracle Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Contracts. Successful attacks of this vulnerability can result in takeover of Oracle Contracts. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).