What is the CVSS score of CVE-2026-83465?

CVE-2026-83465 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H. EPSS exploitation probability: 0.2%.

Oracle CVE-2026-83465

EUVD-2026-79764 HIGH

2026-09-15 secalert_us@oracle.com

GHSA-wwfr-7hx9-c763

Denial Of Service Oracle

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:08 vuln.today

CVE Published

Sep 15, 2026 - 20:18 nvd

HIGH 8.2

DescriptionNVD

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Mobile Application Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Mobile Application Server as well as unauthorized update, insert or delete access to some of Oracle Mobile Application Server accessible data. CVSS 3.1 Base Score 8.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H).

AnalysisAI

Unauthenticated denial of service combined with unauthorized data modification in the Oracle Mobile Application Server (MWA Terminal Server) component of Oracle E-Business Suite 12.2.3 through 12.2.15. A remote attacker with HTTP access can send crafted requests that hang or repeatedly crash the MWA service while also inserting, updating, or deleting some MWA-accessible data, but the attack requires a victim — not the attacker — to perform some interaction (UI:R), and Oracle's scope-change rating indicates effects can spill over to related products. …