Vulnerability in Oracle E-Business Suite's Application Object Library
CVE-2026-83175

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Object Library
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83175?

A vulnerability has been identified in the Oracle Application Object Library component of Oracle E-Business Suite that allows attackers with low privileges and network access to exploit the system. This flaw can enable unauthorized individuals to gain access to sensitive data within the application, potentially compromising the confidentiality of critical information. Successful exploitation could lead to unauthorized access to all data accessible by Oracle Application Object Library components, making it imperative for organizations using affected versions to apply security patches and remedies issued by Oracle.

Affected Version(s)

Oracle Application Object Library 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.