CVE-2026-87402
HighCVSS 7.3Summary
Vulnerability in the Applications DBA product (component AD Utilities) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
Risk Assessment
Could lead to takeover of Applications DBA, impacting confidentiality, integrity and availability. Requires infrastructure access and user interaction, which limits but does not eliminate the risk.
Recommendation
Apply the available Oracle patches for versions 12.2.3-12.2.15 and restrict logon access to the infrastructure to essential personnel.
Other vulnerabilities in Oracle E-Business Suite Applications DBA
Original NVD description (English source)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS