Oracle E-Business Suite (September 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions...

CVE-2026-83461

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

EUVD-2026-79761

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83463

Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...

CVE-2026-83465: Uncontrolled Resource Consumption

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2026-83464: Improper Privilege Management

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83463: Improper Privilege Management

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83462: Improper Authentication

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83461: Missing Authentication for Critical Function

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-70732

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobil...

CVE-2026-70732: Improper Access Control

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobil...

PT-2026-77731

Name of the Vulnerable Software and Affected Versions Oracle Mobile Application Server versions 12.2.3 through 12.2.15 Description An issue exists in the MWA Terminal Server component of the Oracle Mobile Application Server within Oracle E-Business Suite. A low privileged attacker with network...

EUVD-2026-47144

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA General Bugs. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile...

EUVD-2026-47145

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2026-60845

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA General Bugs. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile...

CVE-2026-60846: Improper Access Control

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobi...

CVE-2026-60845: Improper Access Control

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA General Bugs. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Mobile...

EUVD-2008-7196

Malware in sbrugna...

EUVD-2008-2591

Malware in sbrugna...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...