CVE-2026-83158

CVE-2026-83158 is a vulnerability in the Command Line - RapidClone component of Oracle Applications Manager, part of Oracle E-Business Suite releases 12.2.3 through 12.2.15. It is easily exploitable by a low-privileged attacker who already has logon access to the server where Oracle Applications Manager executes, allowing them to elevate their effective access and compromise the Applications Manager. A successful attack yields unauthorized creation, deletion, or modification of critical data, or full read access to all Oracle Applications Manager accessible data, with high confidentiality and integrity impact (CVSS 3.1 base score 7.1; no availability impact). Because the attack vector is local (AV:L), remote exploitation is not indicated — the risk is concentrated on EBS middleware/database hosts reachable by low-privileged OS or application accounts. No public proof of concept is known, the flaw is not on the CISA KEV list, and there is no indication of in-the-wild exploitation.

What to do: Apply the Oracle Critical Patch Update that addresses CVE-2026-83158 to all EBS 12.2.3-12.2.15 environments. Restrict and audit OS-level logon accounts on EBS application and database tiers, enforcing least privilege so ordinary users cannot reach the RapidClone/Applications Manager command-line tools. Review local account activity on EBS hosts for any unauthorized data modification or access to Applications Manager data.