CVE-2026-83491: Medium severity Oracle Oracle iRecruitment vulnerability
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle iRecruitment executes to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iRecruitment accessible data as well as unauthorized access to critical data or complete access to all Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle iRecruitment (Oracle E-Business Suite) - Internal Operationsto a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15 - Compensating control
Restrict access to the physical communication segment attached to the hardware where Oracle iRecruitment executes, since exploitation is possible from that segment.
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Oracle iRecruitment deployments running affected supported versions 12.2.3 through 12.2.15 are exposed if an attacker can access the physical communication segment connected to the hardware hosting the application. The attack vector is adjacent rather than remote over the internet.
Does exploitation require an Oracle iRecruitment account or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated attacker, and no user interaction is required.
What could an attacker gain if exploitation succeeds?
An attacker could obtain unauthorized access to critical data or all data accessible through Oracle iRecruitment. They could also create, delete, or modify critical data or all Oracle iRecruitment-accessible data.
How difficult is exploitation?
The vulnerability has high attack complexity and is described as difficult to exploit. However, successful exploitation has high confidentiality and integrity impact.