Live › vulnerability › CVE-2026-87402
Go to dashboardOracle E-Business Suite's Applications DBA component, in the AD Utilities area, has a flaw that lets a low-privileged user who can log on to the host take over the product. The sources say a person other than the attacker must interact for the attack to succeed, and the CVSS vector rates confidentiality, integrity and availability impact as high.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Oracle E-Business Suite release 12.2.3 through 12.2.15 where Applications DBA is executed, since the attacker needs logon to the infrastructure where it runs. Sites on other releases or without shell access for untrusted users are less exposed; the sources do not say more.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-87402")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.