CVE-2026-83491
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in Oracle iRecruitment (Internal Operations component) versions 12.2.3-12.2.15. An unauthenticated attacker with physical access to the communication segment can gain unauthorized access to critical data and modify or delete it.
Risk Assessment
Risk includes complete confidentiality and integrity breach in iRecruitment, potentially leading to serious damage.
Recommendation
Update Oracle iRecruitment and secure physical access to network infrastructure.
Other vulnerabilities in Oracle iRecruitment
See all- CVE-2026-87124High
Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data, and the attack may impact additional products (scope change).
- CVE-2026-83490High
Vulnerability in Oracle iRecruitment within Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the system. It can lead to unauthorized access to critical data and modification, and the attack may impact additional products (scope change).
- CVE-2026-70835High
Vulnerability in Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can gain full access to data, including critical data, and modify it via HTTP.
- CVE-2026-61026High
In Oracle iRecruitment (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Internal Operations component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
- CVE-2026-61025High
Vulnerability in Oracle iRecruitment from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Original NVD description (English source)
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle iRecruitment executes to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iRecruitment accessible data as well as unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS