CVE-2026-101767 in Application Object Libraryinformation

Résumé

par MITRE • 21/10/2026

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

Oracle

Réserver

28/09/2026

Divulgation

21/10/2026

Modérer

accepté

Entrée

VDB-423462

EPSS

0.00533

KEV

non

Activités

faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!