EUVD-2026-79751
GHSA-q63g-p4g8-5x4j
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description confirms unauthenticated (PR:N) remote HTTP (AV:N) easy (AC:L) exploitation with full component takeover across all three impacts; no scope change stated (S:U).
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in takeover of Oracle Document Management and Collaboration. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
AnalysisAI
Unauthenticated attackers with network access to the HTTP service can fully compromise Oracle Document Management and Collaboration (the Internal Operations component) in Oracle E-Business Suite versions 12.2.3 through 12.2.15, achieving complete loss of confidentiality, integrity and availability - CVSS 3.1 base score 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The root cause is an authentication bypass (CWE-287), meaning no credentials, user interaction or non-default configuration are required; the only prerequisite is that the affected HTTP endpoint be reachable by the attacker, so internet-facing or broadly exposed EBS deployments carry the highest realistic risk. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation over HTTP against Oracle Document Management and Collaboration (Internal Operations component) of Oracle E-Business Suite versions 12.2.3 through 12.2.15. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Oracle fix referenced in the vendor security alert at https://www.oracle.com/security-alerts/cspusep2026.html (cspusep2026), which covers the affected 12.2.3-12.2.15 range - patch status is "patch available per vendor advisory"; an exact patch/CPU identifier could not be independently confirmed from the supplied data, so validate the precise one-off patch or Critical Patch Update level for your EBS 12.2.x release against My Oracle Support before or during deployment, and note that the patch's exact version is not specified in this dataset. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
No vendor-released patch identified at time of analysis; within 24 hours, immediately restrict network access to the affected Oracle E-Business Suite HTTP endpoint (specifically the Document Management and Collaboration component in versions 12.2.3 through 12.2.15) by blocking external traffic and disabling the component if it is not business-critical. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today