Vulnerability in Oracle Corporation Platform Security For Java
CVE-2026-82996
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Platform Security for Java executes to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Oracle Corporation Platform Security For Java — versions 12.2.1.4.0, 14.1.2.0.0
Weakness classification (CWE)
References
- secalert_us@oracle.com (vendor-advisory)
Frequently asked questions
- What is CVE-2026-82996?
- CVE-2026-82996 is a high-severity vulnerability in Oracle Corporation Platform Security For Java, classified under Improper Access Control. CVSS score: 7.8/10. Published 2026-09-15.
- How severe is CVE-2026-82996?
- High severity. CVSS v3 base score is 7.8 out of 10.