CVE-2026-83390
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Vulnerability in the Diagnostics component of Oracle Applications Manager in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with HTTP network access can gain unauthorized read access to some data and cause a partial denial of service.
Risk Assessment
A low-privileged attacker can read some Oracle Applications Manager data and partially disrupt its availability. This may lead to disclosure of diagnostic information and service interruptions.
Recommendation
Apply Oracle's fix for Oracle E-Business Suite 12.2.3-12.2.15. Restrict network access to diagnostic interfaces and monitor low-privileged accounts.
Other vulnerabilities in Oracle Applications Manager
See all- CVE-2026-46933Critical
A vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Attacks may significantly impact additional products.
- CVE-2026-91532High
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Applications Manager.
- CVE-2026-83392Low
Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.
- CVE-2026-83388Low
Vulnerability in Oracle Applications Manager within Oracle E-Business Suite (component Diagnostics). Affects versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a high-privileged network attacker via HTTP to gain unauthorized read access to a subset of data.
- CVE-2026-101742High
Vulnerability in Oracle Applications Manager (component Diagnostics) affecting versions 12.2.3-12.2.15. An easily exploitable network attack via HTTP by a low-privileged user allows takeover of Oracle Applications Manager.
- CVE-2026-83341High
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager, resulting in unauthorized access to critical data.
- CVE-2026-83338High
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Affected versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Applications Manager.
- CVE-2026-83168High
Vulnerability in Oracle Applications Manager (component: Oracle Diagnostics Interfaces) in versions 12.2.3-12.2.15. Easily exploitable, allows low-privileged attacker via HTTPS to take over the system.
- CVE-2026-83115High
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Command Line - RapidClone). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Applications Manager, resulting in unauthorized access to critical data.
- CVE-2026-60763High
Vulnerability in Oracle Applications Manager (component: Command Line - RapidClone) versions 12.2.3-12.2.15. An unauthenticated attacker with local access can fully compromise the system.
Original NVD description (English source)
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Applications Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Applications Manager. CVSS 3.1 Base Score 4.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS