Threat intelligence dashboard
CVE-2026-101682high

Vulnerability record

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

Risk score

7.8

CVSS 3.1

Vendor
Oracle Corporation
Product
Applications DBA
CWE
CWE-284
Published
Oct 20, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Applications DBA

Oracle Corporation

Version / rangeStatusType
12.2.3 to 12.2.15affectedcustom

Technical metrics

7.8

CVSS 3.1

Severity
high
Source
oracle
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H