CVE-2026-83127: High severity Oracle Oracle Sales Offline vulnerability

Q: Who can exploit this vulnerability?

An attacker needs network access to the affected Oracle Sales Offline service over HTTP and must already have low-level privileges. No user interaction is required.

Q: Which deployments are affected?

Affected supported versions are Oracle Sales Offline 12.2.3 through 12.2.15. The issue is in the Internal Operations component.

Q: What is the likely impact of successful exploitation?

A successful attacker can gain unauthorized access to critical data or all data accessible through Oracle Sales Offline. The vulnerability can also significantly affect additional products because its scope changes beyond the vulnerable component.

Published Sep 15, 2026

Updated

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline. While the vulnerability is in Oracle Sales Offline, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Sales Offline accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

Affected Software

1 affected component

Oracle Oracle Sales Offline>=12.2.3<=12.2.15

Event History

Sep 15, 2026

CVE Published

via MITRE·08:03 PM

Data Sourced

via MITRE·08:03 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker needs network access to the affected Oracle Sales Offline service over HTTP and must already have low-level privileges. No user interaction is required.

Which deployments are affected?

Affected supported versions are Oracle Sales Offline 12.2.3 through 12.2.15. The issue is in the Internal Operations component.

What is the likely impact of successful exploitation?

A successful attacker can gain unauthorized access to critical data or all data accessible through Oracle Sales Offline. The vulnerability can also significantly affect additional products because its scope changes beyond the vulnerable component.

CVE-2026-83127: High severity Oracle Oracle Sales Offline vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

Which deployments are affected?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

Which deployments are affected?

What is the likely impact of successful exploitation?