Oracle Mobile Application Server vulnerabilities

7 known vulnerabilities in Oracle Mobile Application Server from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Oracle Mobile Application Server: Improper Access Control

  CVE-2026-101829Oct 20, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network

• 8.2 High severity

  Oracle Mobile Application Server: Uncontrolled Resource Consumption

  CVE-2026-83465Sep 15, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.1 High severity

  Oracle Mobile Application Server: Improper Privilege Management

  CVE-2026-83464Sep 15, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network

• 7.5 High severity

  Oracle Mobile Application Server: Improper Privilege Management

  CVE-2026-83463Sep 15, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access t

• 9.8 Critical severity

  Oracle Mobile Application Server: Improper Authentication

  CVE-2026-83462Sep 15, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.2 High severity

  Oracle Mobile Application Server: Missing Authentication for Critical Functionality

  CVE-2026-83461Sep 15, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 7.2 High severity

  Oracle Mobile Application Server: Improper Access Control

  CVE-2026-60845Jul 21, 2026Oracle

  Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA General Bugs). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network acces