CVE-2026-87403
HighCVSS 7.1Summary
Vulnerability in Applications DBA (AD Utilities component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with local logon access to unauthorized creation, deletion, or modification of critical data.
Risk Assessment
An attacker with local access could modify or delete data and access all Applications DBA data. The CVSS score of 7.1 indicates high confidentiality and integrity risk.
Recommendation
Apply Oracle security updates for versions 12.2.3-12.2.15. Restrict local access to the infrastructure where Applications DBA runs and review account privileges.
Other vulnerabilities in Applications DBA
See all- CVE-2026-101638High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.
- CVE-2026-83118High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.
- CVE-2026-83117High
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Applications DBA.
Original NVD description (English source)
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Applications DBA accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS