CVE-2026-83159

Received Received - Intake

Applications DBA Privilege Escalation in Oracle E-Business Suite

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83159

EUVD

EUVD-2026-79486

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	applications_dba	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle E-Business Suite's Applications DBA component (ADPatch). It allows an unauthenticated attacker with local system access to potentially take over the Applications DBA if a user is tricked into performing a specific action. The attack requires human interaction beyond the attacker.

Detection Guidance

This vulnerability affects Oracle Applications DBA versions 12.2.3 to 12.2.15. Detection requires checking installed versions of Oracle E-Business Suite components. Use Oracle-provided tools like ADPatch or SQL queries to verify the version of Applications DBA. No specific commands are provided in the CVE details.

Impact Analysis

If exploited, this vulnerability could allow an attacker to fully compromise the Applications DBA system, leading to unauthorized access, data breaches, or system takeover. This could expose sensitive data or disrupt operations.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements such as GDPR or HIPAA. Organizations using affected Oracle E-Business Suite versions should address this to maintain regulatory compliance.

Mitigation Strategies

Apply the latest Oracle E-Business Suite patches for Applications DBA (ADPatch) component. Ensure only authorized users have logon access to the infrastructure where Applications DBA executes. Monitor for unusual activity in the Applications DBA environment.

Hi! I’m here to help you understand CVE-2026-83159. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70