CVE-2026-83483
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Vulnerability in Oracle Advanced Benefits (component: Self-serv What-if Analysis) of Oracle E-Business Suite. Affects versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can take over Oracle Advanced Benefits, potentially impacting additional products.
Risk Assessment
Risk of full system takeover, including compromise of confidentiality, integrity, and availability, with potential impact on other products.
Recommendation
Apply patches provided by Oracle for Oracle E-Business Suite. Restrict network access and monitor activities of high-privileged users.
Other vulnerabilities in Oracle Advanced Benefits
See all- CVE-2026-62542Medium
A vulnerability in Oracle Advanced Benefits (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
- CVE-2026-61325High
Vulnerability in Oracle Advanced Benefits (part of Oracle E-Business Suite) version 12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
- CVE-2026-61324High
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite (component: Internal Operations). Affects version 12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Benefits, potentially impacting additional products (scope change). Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. CVSS 7.7 (Integrity impacts).
- CVE-2026-61141High
Vulnerability in Oracle Advanced Benefits (component: Affordable Care Act) versions 12.2.7-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Original NVD description (English source)
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS