CVE-2026-83118
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.
Risk Assessment
A low privileged attacker with local access can take over Applications DBA, impacting confidentiality, integrity, and availability. The CVSS score of 7.8 indicates high risk.
Recommendation
Apply the Oracle patches for versions 12.2.3-12.2.15 or upgrade to a patched version. Restrict local access to the infrastructure where Applications DBA executes.
Other vulnerabilities in Applications DBA
See all- CVE-2026-87403High
Vulnerability in Applications DBA (AD Utilities component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with local logon access to unauthorized creation, deletion, or modification of critical data.
- CVE-2026-101638High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
- CVE-2026-83117High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Applications DBA.
Original NVD description (English source)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS