Live › vulnerability › CVE-2026-101638
Go to dashboardOracle E-Business Suite's Applications DBA component, specifically its AD Utilities part, has a flaw affecting versions 12.2.3 through 12.2.15. A low-privileged user with logon access to the host running Applications DBA can take it over, but a second person must take an action for the attack to succeed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite 12.2.3 through 12.2.15 with Applications DBA on the host are affected. The attacker needs a logon on the infrastructure where Applications DBA runs, so exposure is mainly from internal or shared hosts rather than the internet. Teams not running Oracle E-Business Suite in this version range can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101638")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.