CVE-2026-83131

Received Received - Intake

Unauthorized Data Access in Oracle Web Applications Desktop Integrator

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Web Applications Desktop Integrator. While the vulnerability is in Oracle Web Applications Desktop Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Web Applications Desktop Integrator accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83131

EUVD

EUVD-2026-79459

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	web_applications_desktop_integrator	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Web Applications Desktop Integrator, part of Oracle E-Business Suite. It allows a low-privileged attacker with network access to download files, potentially leading to unauthorized access to sensitive data. The impact is limited to data accessible through this component.

Detection Guidance

This vulnerability affects Oracle Web Applications Desktop Integrator versions 12.2.3 to 12.2.15. Detection requires checking for vulnerable versions of this component. Oracle recommends applying the latest patches to mitigate risks. No specific commands are provided in the given context.

Impact Analysis

If exploited, an attacker could gain unauthorized access to critical or all data accessible through Oracle Web Applications Desktop Integrator. This may include sensitive business or personal information, depending on what data the system handles.

Compliance Impact

This vulnerability allows unauthorized access to critical or all accessible data in Oracle Web Applications Desktop Integrator, which could lead to exposure of sensitive information. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) if such data is compromised.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite to address the vulnerability in Oracle Web Applications Desktop Integrator. Ensure all affected versions (12.2.3-12.2.15) are updated. Monitor Oracle's security advisories for additional guidance and patches.

Hi! I’m here to help you understand CVE-2026-83131. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70