Live › vulnerability › CVE-2026-87403
Go to dashboardOracle E-Business Suite's Applications DBA component, in the AD Utilities area, has a flaw that lets a low-privileged user with logon to the host change or read data it can access. The attacker needs local logon to the infrastructure where Applications DBA runs; CVSS 3.1 scores it 7.1 with high confidentiality and integrity impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite release 12.2.3 through 12.2.15 where Applications DBA executes on a host that low-privileged users can log into. Systems where only administrators have shell access are less exposed but still need the patch.
No product ranges from the sources yet.
12.2.3 through 12.2.15 (unknown exact command in sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Applications DBA accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-87403")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.