CVE-2026-83453

highPriorität · verfolgen · 29EPSS 0.005 · 42. PerzentilDENLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (42nd) EPSS

CVSS 7.2 · high

Is it mine?

19 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cert_bund · ncsc_nl · nvd

EPSS · bewertet 2026-10-27

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.2

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–7.2

v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · secalert_us@oracle.com USAusnutzbarkeit 1.2 · Auswirkung 5.9

v3.16.6mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.2highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-269US

betroffene Produkte (19)

Betroffene Produkte und Versionsbereiche.

Oracle E-Business Suite 12.2.10-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.10-12.2.15
Oracle E-Business Suite 12.2.11-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.11-12.2.15
Oracle E-Business Suite 12.2.12-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.12-12.2.15
Oracle E-Business Suite 12.2.13-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.13-12.2.15
Oracle E-Business Suite 12.2.14-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.14-12.2.15
Oracle E-Business Suite 12.2.3-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.3-12.2.15
Oracle E-Business Suite 12.2.4-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.4-12.2.15
Oracle E-Business Suite 12.2.5-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.5-12.2.15
Oracle E-Business Suite 12.2.6-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.6-12.2.15
Oracle E-Business Suite 12.2.7-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.7-12.2.15
Oracle E-Business Suite 12.2.8-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.8-12.2.15
Oracle E-Business Suite 12.2.9-12.2.15alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:12.2.9-12.2.15
Oracle E-Business Suite V16alle Versionencert_bundDEcpe:/a:oracle:e-business_suite:v16
Oracle Oracle Application Object Library≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Applications Framework≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Applications Manager≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Document Management and Collaboration≤ vers:unknown/*ncsc_nlNL
Oracle Oracle Mobile Application Server≤ vers:unknown/*ncsc_nlNL
oracle document management and collaboration12.2.3 → 12.2.15nvdUScpe:2.3:a:oracle:document_management_and_collaboration:*:*:*:*:*:*:*:*

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2026-0376Kwetsbaarheden verholpen in Oracle E-Business SuiteNL2026-09-16csaf · ncsc_nlNL
Oracle heeft 159 kwetsbaarheden verholpen in diverse Oracle E-Business Suite-producten, waaronder Oracle Applications Framework, Oracle Document Management and Collaboration, Oracle Mobile Application Server, Oracle Alert, Oracle Application Object Library, Oracle Applications Manager, Oracle Bills of Material, Oracle Complex Maintenance, Repair and Overhaul, Oracle Contract Lifecycle Management for Public Sector, Oracle Contracts, Oracle Customer Interaction History, Oracle Demand Signal Repository, Oracle Depot Repair, Oracle Marketing, Oracle Product Hub, Oracle Purchasing, Oracle Report Manager, Oracle Sales Online, Oracle Spares Management, Oracle User Management, Oracle iStore, Oracle HRMS (India), Oracle iRecruitment, Oracle Product Workbench, Oracle Financials for Asia/Pacific, Oracle Engineering, Oracle CRM Technical Foundation, Oracle Financials Common Modules, Oracle Installed Base, Oracle One-to-One Fulfillment, Oracle Order Management, Oracle Project Intelligence, Oracle Work in Process, Oracle Advanced Benefits, Applications DBA, Enterprise Command Center Framework, Oracle Field Service, Oracle Proposals, Oracle Sales, Oracle Sales Offline, Oracle Web Applications Desktop Integrator, Oracle Quality, Oracle Sourcing, Oracle Common Applications, Oracle Lease and Finance Management, Oracle Common Applications Calendar, Oracle Partner Management, Oracle Site Hub, Oracle US Federal Human Resources, Oracle XML Gateway, Oracle HR Intelligence, Oracle Assets en Oracle Process Manufacturing Intelligence.
WID-SEC-W-2026-3400Oracle E-Business Suite: Mehrere SchwachstellenDeutsch2026-09-15csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle E-Business Suite ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cert_bund ncsc_nl nvd NVD CVE.org MITRE

veröffentlicht 2026-09-15geändert 2026-10-08

Referenzen (1) nvd

Externe Belege — Patches, Meldungen, Analysen.

https://www.oracle.com/security-alerts/cspusep2026.htmlVendor Advisory

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan