CVE-2026-101542

Summary

A low-privileged attacker with network access via HTTP can exploit a vulnerability in Oracle Capacity (part of Oracle E-Business Suite) to fully compromise the application, leading to complete loss of confidentiality, integrity, and availability.

Exploitability

Easily exploitable by a low-privileged attacker with network access via HTTP; no user interaction required.

Blast radius

Successful exploitation results in full system takeover of Oracle Capacity, enabling data exfiltration, unauthorized modification, and service disruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle E-Business Suite 12.2.16 or later, as versions 12.2.3–12.2.15 are affected.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.