Threat intelligence dashboard
CVE-2026-87356high

Vulnerability record

Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications Platform Engineering executes to compromise Applications Platform Engineering. Successful attacks of this vulnerability can result in takeover of Applications Platform Engineering. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Risk score

7.8

CVSS 3.1

Vendor
Oracle Corporation
Product
Applications Platform Engineering
CWE
CWE-200
Published
Oct 20, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Applications Platform Engineering

Oracle Corporation

Version / rangeStatusType
12.2.3 to 12.2.15affectedcustom

Technical metrics

7.8

CVSS 3.1

Severity
high
Source
oracle
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H