7.5
High
CVE-2023-21849 Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils)
Description
Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications DBA accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Applications DBA | 12.2.3-12.2.12 | No fix stated |
References
- Oracle Advisory www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Applications DBA
The 14 CVEs of Applications DBA →
CVE-2026-87403
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
7.1
High
CVE-2026-87402
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
7.3
High
CVE-2026-87335
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations)
6.5
Medium
CVE-2026-101682
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities)
7.8
High