CVE-2026-83117
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Applications DBA.
Risk Assessment
A high privileged attacker can take over Applications DBA, impacting confidentiality, integrity, and availability. The CVSS score of 7.2 indicates high risk.
Recommendation
Apply the Oracle patches for versions 12.2.3-12.2.15 or upgrade to a patched version. Restrict network access to Applications DBA.
Other vulnerabilities in Applications DBA
See all- CVE-2026-87403High
Vulnerability in Applications DBA (AD Utilities component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with local logon access to unauthorized creation, deletion, or modification of critical data.
- CVE-2026-101638High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
- CVE-2026-83118High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.
Original NVD description (English source)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS