What is GHSA-h33w-pj96-qw6p?

GHSA-h33w-pj96-qw6p is a security advisory published by GitHub Security Advisories with High severity. Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported...

Which CVE IDs does GHSA-h33w-pj96-qw6p cover?

GHSA-h33w-pj96-qw6p covers the following CVE IDs: CVE-2026-83156. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h33w-pj96-qw6p?

GHSA-h33w-pj96-qw6p has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-h33w-pj96-qw6pHighCVSS 7.5

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-83156 →

📋 Description

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to compromise Oracle XML Developers Kit. Successful attacks of this vulnerability can result in takeover of Oracle XML Developers Kit. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-83156
https://www.oracle.com/security-alerts/cspusep2026.html
https://github.com/advisories/GHSA-h33w-pj96-qw6p