- Description
- Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- Source
- secalert_us@oracle.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-287
- Hype score
- Not currently trending
แจ้งเตือนตรวจพบช่องโหว่ความปลอดภัยใน Oracle Application Object Library ศูนย์ประสานการรักษาความมั่นคงปลอดภัยระบบคอมพิ
@ThaiCERTByNCSA
4 Nov 2026
65 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Oracle E-Business Suite’teki CVE-2026-101767 (CVSS 9,8) açığına yamadan bir hafta sonra ilk istismar denemeleri başladı. Bordro, İK ve finans verisi risk altında: Ekim CPU’yu hemen kurun. https://t.co/wFV0N6M2Z6 #Oracle #siberguvenlik #KVKK #CVE https://t.co/zksZf5u
@cybernews_tr
1 Nov 2026
66 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Oracle E-Business Suite: attackers are already probing CVE-2026-101767 (CVSS 9.8), fixed in Oracle's Oct patch. Unauthenticated SQL injection to RCE in EBS 12.2.3 to 12.2.15. Patch now. EBS holds payroll and HR data, and Cl0p mass-hit it in 2025. Via Horizon3, Defused http
@phantmradar
28 Oct 2026
102 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Attackers are probing the internet for Oracle E-Business Suite systems missing the Oct 20 patch for CVE-2026-101767. It's an unauthenticated SQL injection in the Thin Client Framework servlet that chains to remote code execution, and Shadowserver tracks 670+ exposed EBS
@XavierRiveraX
28 Oct 2026
91 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes