CVE-2026-83194
Received Received - Intake

Oracle Depot Repair Product Takeover Vulnerability

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in takeover of Oracle Depot Repair. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-10-06
AI Q&A
2026-09-15
EPSS Evaluated
2026-10-04
NVD
CVE-2026-83194
EUVD
EUVD-2026-79546

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle depot_repair From 12.2.10 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Depot Repair, part of Oracle E-Business Suite. It affects versions 12.2.10 to 12.2.15. A low-privileged attacker with network access via HTTP can exploit it to take over the Oracle Depot Repair system.

Detection Guidance

This vulnerability affects Oracle Depot Repair in Oracle E-Business Suite versions 12.2.10 to 12.2.15. Detection requires checking for unpatched versions of this component. Inspect Oracle E-Business Suite instances for the affected versions and verify if the Oracle Depot Repair module is installed and accessible via HTTP. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability allows an attacker to fully compromise Oracle Depot Repair, leading to potential loss of confidentiality, integrity, and availability of the system. This could result in unauthorized access, data breaches, or system downtime.

Compliance Impact

The vulnerability allows unauthorized takeover of Oracle Depot Repair, which could lead to unauthorized access or modification of sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) if such data is processed or stored in the affected system.

Mitigation Strategies

Apply the latest Oracle E-Business Suite patches for the Depot Repair component to address the vulnerability. Ensure network access controls restrict HTTP access to only trusted sources. Monitor for unusual activity in the Oracle Depot Repair module.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-83194. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart