Threats affecting pkg:maven/com.oracle/Oracle-Applications-DBA

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.3%	CVE-2026-70681Oracle Applications DBA · Improper Access Control High7.5EPSS 0.3%2026-08-18CVE Database V5CVE-2026-70681 CVE-2026-70681 is a high-severity vulnerability in Oracle Applications DBA component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Oracle Applications DBA. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.5. EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-08-18
High	7.2	EPSS 0.5%	CVE-2026-61107Oracle Applications DBA · Improper Privilege Management High7.2EPSS 0.5%2026-07-21CVE Database V5CVE-2026-61107 Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in takeover of Oracle Applications DBA. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-269	CVE Database V5	2026-07-21
High	7.6	EPSS 0.3%	CVE-2026-22011Oracle Applications DBA · Improper Access Control High7.6EPSS 0.3%2026-04-21CVE Database V5CVE-2026-22011 CVE-2026-22011 is a high-severity vulnerability in Oracle Applications DBA component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Exploitation is difficult and requires human interaction from a person other than the attacker. Successful exploitation can lead to full takeover of Oracle Applications DBA and may impact additional Oracle products due to scope change. The vulnerability has a CVSS 3.1 base score of 7. EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-04-21
Medium	6.5	EPSS 0.4%	CVE-2026-21960Oracle Applications DBA · Improper Access Control Medium6.5EPSS 0.4%2026-01-20CVE Database V5CVE-2026-21960 Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-01-20

Page 1 of 1