CVE Vulnerability in Oracle E-Business Suite Command Line Component
CVE-2026-83157

8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Applications Manager
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83157?

A vulnerability exists within the Oracle Applications Manager of the Oracle E-Business Suite, specifically in its Command Line - RapidClone component. This vulnerability can be exploited by an attacker with high privileges who has network access via HTTP, potentially leading to a complete takeover of Oracle Applications Manager. Due to its nature, the impact of this vulnerability may extend beyond just Oracle Applications Manager, affecting additional interconnected products. The difficulty in exploiting this vulnerability may deter some attackers, but successful exploitation could lead to severe security implications, compromising confidentiality, integrity, and availability.

Affected Version(s)

Oracle Applications Manager 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.