{"id":"CVE-2026-101767","published":"2026-10-20T22:18:32.060","lastModified":"2026-10-21T18:44:55.490","description":"Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).  Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library.  Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to fully compromise the Oracle Application Object Library component in Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. The flaw enables attackers to gain complete control over the affected system with high impact on confidentiality, integrity, and availability.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing attackers to compromise the system via simple HTTP network access.","blast_radius":"If exploited, this vulnerability could lead to complete takeover of Oracle E-Business Suite installations, potentially affecting critical business applications and data across enterprise environments.","remediation":"Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite 12.2.x immediately, as this CVE is specifically addressed in the Oracle CPU release containing fixes for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["web","rce","database"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:24:10.498Z"}}