CVE-2026-83452

Received Received - Intake

Oracle Document Management and Collaboration Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83452

EUVD

EUVD-2026-79751

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	document_management_and_collaboration	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This is a critical vulnerability in Oracle Document Management and Collaboration within Oracle E-Business Suite. It allows an unauthenticated attacker with network access via HTTP to take over the system. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of Oracle Document Management and Collaboration (12.2.3-12.2.15) on your systems. Review installed Oracle E-Business Suite components and verify if the affected module is present. Check Oracle's official documentation for version-specific detection methods.

Impact Analysis

An attacker could exploit this to gain full control of the Oracle Document Management and Collaboration system. This could lead to unauthorized access to sensitive documents, data theft, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of regulated data, violating GDPR, HIPAA, or other compliance requirements. Organizations using affected versions may face legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) immediately to address this vulnerability. Isolate affected systems from untrusted networks until patched. Monitor Oracle's security advisories for updates and follow their recommended remediation steps.

Hi! I’m here to help you understand CVE-2026-83452. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70