Live › vulnerability › CVE-2026-101683
Go to dashboardOracle E-Business Suite's Applications DBA component (AD Utilities) has a flaw that lets a low-privileged user who can log on to the host take control of Applications DBA. A successful attack gives full confidentiality, integrity and availability impact on that component.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite 12.2.3 through 12.2.15 with Applications DBA on servers that local users can log on to. The attack needs a low-privileged logon to the infrastructure, so internet-only exposure without local accounts is lower risk. Teams on releases outside the listed range can skip it.
No product ranges from the sources yet.
12.2.3 to 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101683")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.