CVE-2026-83341 is a vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite, affecting versions 12.2.3 to 12.2.15. The flaw resides in the Command Line - RapidClone component and can be exploited remotely without authentication over HTTP. Successful exploitation leads to unauthorized access to critical data managed by Oracle Applications Manager. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects a network attack vector with low attack complexity, no privileges or user interaction required, and a high confidentiality impact. Oracle has released security patches as part of its September 2026 Critical Security Patch Update to remediate this issue.

An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical data within Oracle Applications Manager. The impact is limited to confidentiality, with no direct impact on integrity or availability. This could lead to exposure of sensitive information managed by Oracle Applications Manager.

Oracle has released patches addressing this vulnerability in the September 2026 Critical Security Patch Update. Customers are strongly advised to apply these security patches promptly to remediate the vulnerability. Remaining on actively supported versions and timely patching are critical to prevent exploitation. No additional mitigation steps are specified by Oracle beyond applying the official patches.