CVE-2026-83188

Received Received - Intake

Oracle Depot Repair Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in takeover of Oracle Depot Repair. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83188

EUVD

EUVD-2026-79540

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	depot_repair	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Depot Repair, part of Oracle E-Business Suite. It allows a high-privileged attacker with network access to take over the system. The flaw exists in versions 12.2.3 to 12.2.15.

Detection Guidance

Detection requires checking for Oracle E-Business Suite versions 12.2.3 to 12.2.15 with the Oracle Depot Repair component exposed to HTTP. Inspect Oracle application logs for unusual activity or unauthorized access attempts to the Depot Repair module.

Impact Analysis

An attacker could gain full control of Oracle Depot Repair, leading to potential data breaches, unauthorized modifications, or system disruptions. This could affect business operations and sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate GDPR, HIPAA, or other regulations. Compliance could be compromised if sensitive data is exposed or altered.

Mitigation Strategies

Apply Oracle-provided patches or updates for Oracle Depot Repair immediately. Restrict network access to the HTTP interface of the affected component and ensure only trusted users have high privileges. Monitor for suspicious activity in the Oracle E-Business Suite logs.

Hi! I’m here to help you understand CVE-2026-83188. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70