Skip to content
OracleCVE-2026-83076

Oracle HR Intelligence: denial of service via Internal Operations

Medium6.8CVE-2026-83076 · Published Sep 15, 2026 · updated Sep 16, 2026

Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HR Intelligence accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle HR Intelligence. CVSS 3.1 Base Score 6.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H).

Oracle advisory

Affected versions

PackageAffectedFixed in
Oracle HR Intelligence
Product
>= 12.2.3, <= 12.2.15No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Oracle advisories

All Oracle
Advisory
Oracle GraalVM for JDK: takeover via Compiler
High8.1Sep 15
Oracle GraalVM for JDK: data tampering via Compiler
High7.0Sep 15
Oracle GraalVM for JDK: takeover via Compiler
High8.1Sep 15
Oracle VM VirtualBox: flaw in Core
Low3.2Sep 15
Oracle VM VirtualBox: denial of service via Core
Medium6.0Sep 15
Oracle GraalVM: takeover via Compiler
High8.1Sep 15

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.