CVE-2026-83453

Received Received - Intake

Oracle Document Management and Collaboration Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83453

EUVD

EUVD-2026-79752

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	document_management_and_collaboration	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Document Management and Collaboration within Oracle E-Business Suite. It affects versions 12.2.3 to 12.2.15 and allows a high-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of the Oracle Document Management and Collaboration component.

Detection Guidance

Detection requires checking for Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15. Inspect Oracle E-Business Suite installations for this component and verify if it is exposed to HTTP network access. No specific commands are provided in the context.

Impact Analysis

An attacker exploiting this vulnerability could gain full control over the Oracle Document Management and Collaboration system. This may result in unauthorized access to sensitive documents, modification or deletion of critical data, and disruption of services. The impact includes confidentiality, integrity, and availability breaches.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using affected Oracle versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite to address this vulnerability. Ensure the affected component Oracle Document Management and Collaboration is updated to a non-vulnerable version (12.2.3 or later patched versions). Restrict network access to HTTP interfaces and enforce strong authentication for privileged users.

Hi! I’m here to help you understand CVE-2026-83453. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70