What is the CVSS score of EUVD-2026-79490?

EUVD-2026-79490 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Oracle EUVD-2026-79490

| CVE-2026-83163 HIGH

2026-09-15 secalert_us@oracle.com

GHSA-h6vj-42gj-p4f5

Oracle File Upload

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:37 vuln.today

CVE Published

Sep 15, 2026 - 20:18 nvd

HIGH 8.8

DescriptionNVD

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Attachments / File Upload). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

AnalysisAI

Network-reachable file-upload flaws in Oracle E-Business Suite's Application Object Library (Attachments component, versions 12.2.3 through 12.2.15) allow a low-privileged authenticated user to take over the affected component, earning a CVSS 3.1 base score of 8.8 with High confidentiality, integrity and availability impact and no user interaction. Exploitation needs only a valid low-privilege EBS account plus HTTP access — no privileged role, no crash, no victim action — which makes it an attractive post-authentication escalation path inside ERP deployments. …