CVE-2026-83337

Received Received - Intake

Remote Code Execution in Oracle Middleware Common Libraries and Tools

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Middleware Common Libraries and Tools executes to compromise Oracle Middleware Common Libraries and Tools. Successful attacks of this vulnerability can result in takeover of Oracle Middleware Common Libraries and Tools. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-07

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-05

NVD

CVE-2026-83337

EUVD

EUVD-2026-79690

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	middleware_common_libraries_and_tools	12.2.1.4.0
oracle	middleware_common_libraries_and_tools	14.1.1.0.0
oracle	middleware_common_libraries_and_tools	14.1.2.0.0
oracle	middleware_common_libraries_and_tools	15.1.1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Middleware Common Libraries and Tools, specifically in the Remote Diagnostic Agent component. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with local access can exploit it to take over the system.

Detection Guidance

Detection requires checking for vulnerable versions of Oracle Middleware Common Libraries and Tools. Verify installed versions against affected releases (12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0). Use Oracle's tools or scripts to inspect the Remote Diagnostic Agent component for misconfigurations or unauthorized access.

Impact Analysis

An attacker could gain full control over the Oracle Middleware Common Libraries and Tools, leading to unauthorized access, data breaches, or disruption of services. This could affect confidentiality, integrity, and availability of critical systems.

Compliance Impact

The vulnerability allows low-privileged attackers to compromise Oracle Middleware Common Libraries and Tools, potentially leading to unauthorized access, data breaches, or system takeover. This could impact compliance with GDPR by risking unauthorized data access or processing, and with HIPAA by compromising protected health information integrity and confidentiality.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for the affected versions of Oracle Middleware Common Libraries and Tools. Check Oracle's advisory for specific patches and follow their instructions to update the Remote Diagnostic Agent component.

Hi! I’m here to help you understand CVE-2026-83337. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70