CVE Catalog

CVE-2026-83392

LowCVSS 3.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.

Risk Assessment

Can lead to disclosure of confidential diagnostic information to low-privileged users.

Recommendation

Apply Oracle patches for Oracle Applications Manager and restrict network access to the HTTP interface to trusted users.

Other vulnerabilities in Oracle Applications Manager

See all
Original NVD description (English source)

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS