Vulnerability in Oracle E-Business Suite's Application Object Library
CVE-2026-83178

8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Application Object Library
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83178?

A vulnerability exists in the Oracle Application Object Library, part of the Oracle E-Business Suite. This issue allows a high-privileged attacker with network access to potentially compromise the Application Object Library, leading to unauthorized control over the affected module. This flaw could affect other integrated products within the suite, expanding the risk beyond the immediate component. The vulnerability is accessible via HTTP and could have severe consequences for confidentiality, integrity, and availability in systems utilizing this library.

Affected Version(s)

Oracle Application Object Library 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.