CVE-2026-83090 in Spares Management信息

摘要

由 MITRE • 2026-09-16

Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Spares Management. Successful attacks of this vulnerability can result in takeover of Oracle Spares Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Oracle

预定

2026-08-31

披露

2026-09-16

管理

已接受

条目

VDB-404725

CPE

准备好

CWE

CWE-269 (已确认)

CVSS

8.8 (CNA)

EPSS

0.00000

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-83090
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-83090
CVE Details	https://www.cvedetails.com/cve/CVE-2026-83090/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!