CVE-2026-101638
HighCVSS 7.3Summary
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
Risk Assessment
Successful exploitation can result in takeover of Applications DBA, impacting confidentiality, integrity, and availability. It requires low privileges and user interaction but is easily exploitable.
Recommendation
Apply the available Oracle security updates for versions 12.2.3-12.2.15. Restrict local access to the infrastructure and educate users on security.
Other vulnerabilities in Applications DBA
See all- CVE-2026-87403High
Vulnerability in Applications DBA (AD Utilities component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with local logon access to unauthorized creation, deletion, or modification of critical data.
- CVE-2026-83118High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.
- CVE-2026-83117High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Applications DBA.
Original NVD description (English source)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS