CVE-2026-87335

MediumCVSS 6.5

Published: 20/10/2026(UTC)Updated: 28/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Vulnerability in Oracle E-Business Suite Applications DBA (Internal Operations component) affecting versions 12.2.3-12.2.15. An easily exploitable HTTP attack by a low-privileged user can lead to unauthorized access to critical data.

Risk Assessment

An attacker could access sensitive application data, resulting in confidentiality breaches and business losses.

Recommendation

Immediately install security patches for Oracle E-Business Suite and review access permissions for the Applications DBA component.

Other vulnerabilities in Oracle E-Business Suite Applications DBA

CVE-2026-87402High
Vulnerability in the Applications DBA product (component AD Utilities) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged attacker with logon access to the infrastructure to compromise Applications DBA, requiring human interaction.

Original NVD description (English source)

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Applications DBA. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Applications DBA accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS