CVE-2026-83388 is a vulnerability in Oracle Applications Manager within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to gain unauthorized read access to some data accessible by Oracle Applications Manager. The vulnerability is rated as low severity with a CVSS 3.1 base score of 2.2, reflecting limited confidentiality impact and no impact on integrity or availability.
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Manager. CVSS 3.1 Base Score 3.3 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L).
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
CVE-2026-101551 is a vulnerability in Oracle Applications Manager within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all data accessible by Oracle Applications Manager. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has released a Critical Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the provided patches promptly to mitigate risk.
A vulnerability in Oracle Applications Manager component of Oracle E-Business Suite versions 12.2.3 through 12.2.15 allows a low privileged attacker with network access via HTTPS to compromise the application. The vulnerability has a high CVSS score of 8.8, impacting confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate the risk of compromise.
A vulnerability exists in the Oracle Applications Manager component of Oracle E-Business Suite (Command Line - RapidClone) affecting versions 12.2.3 through 12.2.15. This vulnerability requires high privileges and network access via HTTP and can lead to a complete takeover of Oracle Applications Manager, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.0, indicating high severity. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
A vulnerability exists in the Oracle Applications Manager component (Command Line - RapidClone) of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data within Oracle Applications Manager. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact but no integrity or availability impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Application Logging Interfaces). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Applications Manager accessible data as well as unauthorized read access to a subset of Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).