CVE-2026-83489

Received Received - Intake

Oracle Banking Origination Privilege Escalation

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboarding Batch Processes). Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Origination. Successful attacks of this vulnerability can result in takeover of Oracle Banking Origination. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83489

EUVD

EUVD-2026-79776

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	banking_origination	From 14.5.0.0.0 (inc) to 14.9.0.0.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Banking Origination, part of Oracle Financial Services Applications. It affects versions 14.5.0.0.0 to 14.9.0.0.0. A low-privileged attacker with network access via HTTP could exploit it to take over the system. The vulnerability has a CVSS score of 7.5, indicating high impact on confidentiality, integrity, and availability.

Detection Guidance

Detection requires monitoring Oracle Banking Origination logs for unusual HTTP access patterns or unauthorized batch process executions. Check for unexpected administrative actions or privilege escalations in the system. Review network traffic for HTTP requests targeting the Onboarding Batch Processes component.

Impact Analysis

If exploited, an attacker could gain full control of the Oracle Banking Origination system. This may lead to unauthorized access to sensitive data, manipulation of banking processes, or disruption of services. Organizations using affected versions are at risk of financial and operational damage.

Compliance Impact

This vulnerability could lead to breaches of sensitive financial or personal data, violating regulations like GDPR or HIPAA. Organizations may face legal penalties, reputational damage, and loss of customer trust due to non-compliance resulting from unauthorized system access.

Mitigation Strategies

Apply Oracle's official security patches for versions 14.5.0.0.0 to 14.9.0.0.0 immediately. Restrict network access to the HTTP interface via firewalls or network segmentation. Implement strict access controls to limit low-privileged user permissions. Monitor and audit system activities for suspicious behavior.

Hi! I’m here to help you understand CVE-2026-83489. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70