CVE-2026-83462
CriticalCVSS 9.8Summary
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. An unauthenticated attacker with network access via TCP can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.
Risk Assessment
Critical risk — an attacker can take over Oracle Mobile Application Server, compromising confidentiality, integrity, and availability.
Recommendation
Immediately apply Oracle patches and restrict TCP access to trusted sources.
Other vulnerabilities in Oracle Mobile Application Server
See all- CVE-2026-70732Medium
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain complete access to critical data. The attack is easy to exploit.
- CVE-2026-60846Medium
Vulnerability in Oracle Mobile Application Server (component: MWA Terminal Server) versions 12.2.3-12.2.15. Allows a high privileged attacker with network access via HTTP to compromise the server. Successful attacks can result in unauthorized access to critical data, full access to all server data, unauthorized update/insert/delete access, and denial of service. CVSS 3.1 Base Score 6.7.
Original NVD description (English source)
Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobile Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).