Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…

High CVSS 8.2

CVECVE-2026-83465

First seen2026-09-21 23:16 UTC

Disclosed2026-09-15 20:18 UTC

Last updated2026-09-21 23:16 UTC

Channel statusauto

Summary

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Application Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Mobile Application Server, attacks may significantl…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.oracle.com/security-alerts/cspusep2026.html

Timeline

2026-09-21 nvd_ingest NVD