CVE-2026-101647 in iSetupinfo

Zusammenfassung

von MITRE • 21.10.2026

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in takeover of Oracle iSetup. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

Oracle

Reservieren

28.09.2026

Veröffentlichung

21.10.2026

Moderieren

akzeptiert

Eintrag

VDB-423376

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!