Live › vulnerability › CVE-2026-101682
Go to dashboardOracle E-Business Suite's Applications DBA component, specifically AD Utilities, has a flaw in supported versions 12.2.3 through 12.2.15. An attacker who already has logon to the infrastructure where Applications DBA runs can compromise the product and take it over, with a person other than the attacker needing to take an action.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite release 12.2.3 through 12.2.15 where Applications DBA is installed on a host that other people or accounts can log in to. The sources describe a local attacker with logon to that infrastructure, so systems reachable only by administrators with no other local users are lower risk.
No product ranges from the sources yet.
12.2.3 through 12.2.15.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101682")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.