CVE Catalog

CVE-2026-83388

LowCVSS 2.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.

Risk Assessment

Can lead to disclosure of confidential diagnostic information, although it requires high privileges and is difficult to exploit.

Recommendation

Apply Oracle patches for Oracle Applications Manager and restrict network access to the HTTP interface to the necessary minimum.

Other vulnerabilities in Oracle Applications Manager

See all
Original NVD description (English source)

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS