8.0
Élevée
CVE-2026-83483 Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis)
Description
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self-serv What-if Analysis). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits. CVSS 3.1 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Advanced Benefits 12.2 | 12.2.3 → 12.2.15 | Pas de correctif indiqué |
Autres CVE de Oracle Advanced Benefits
Les 7 CVE de Oracle Advanced Benefits →
CVE-2026-62542
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self Service Benefits)
6.3
Moyenne
CVE-2026-61325
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
7.6
Élevée
CVE-2026-61324
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
7.7
Élevée
CVE-2026-61323
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)
6.5
Moyenne