8.8
Élevée
CVE-2026-83189 Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation)
Description
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in takeover of Oracle User Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle User Management 12.2 | 12.2.3 → 12.2.15 | Pas de correctif indiqué |
Autres CVE de Oracle User Management
Les 4 CVE de Oracle User Management →
CVE-2026-83119
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Internal Operations)
8.8
Élevée
CVE-2026-22014
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events)
3.8
Faible
CVE-2025-30708
Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users)
7.5
Élevée