CVE-2008-2596

CVE-2008-2596 affects Oracle E-Business Suite 12.0.3, Mobile Application Server. Oracle’s E-Business Suite risk matrix lists the vulnerability as exploitable with a valid session over HTTP, with CVSS v2 base score 5.5 (Network, Low access complexity, Single authentication, Confidentiality/Integri...

CVE-2026-83462

Oracle Mobile Application Server (component: MWA Terminal Server ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, impacting co...

CVE-2026-83464

Oracle Mobile Application Server (component: MWA Terminal Server ), part of Oracle E-Business Suite, is affected in versions 12.2.3 through 12.2.15 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via TCP to achieve full takeover of the server, with hi...

CVE-2026-83461

CVE-2026-83461 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via TCP , requiring no user interaction. Succes...

CVE-2026-83465

CVE-2026-83465 affects the MWA Terminal Server component of Oracle Mobile Application Server within Oracle E-Business Suite, impacting supported versions 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity, though it...

CVE-2026-83463

Oracle Mobile Application Server (MWA Terminal Server component of Oracle E-Business Suite , versions 12.2.3–12.2.15) is affected by a vulnerability that allows an unauthenticated attacker with access to the adjacent physical communication segment to achieve full takeover of the server, impacting...

CVE-2026-70732

The MWA Terminal Server component of Oracle E-Business Suite (versions 12.2.3 through 12.2.15) is vulnerable to an easily exploitable flaw reachable over HTTP by a low-privileged attacker, allowing unauthorized access to critical data or full access to all server-accessible data (CVSS 6.5, confid...