CVE-2026-101567

Summary

A vulnerability in Oracle Cost Management allows a low-privileged attacker with network access via HTTP to compromise the application, leading to full system takeover due to insufficient input validation or access controls in the Cost Planning component.

Exploitability

Easily exploitable by a low-privileged attacker with network access via HTTP; no user interaction required.

Blast radius

Successful exploitation results in complete compromise of Oracle Cost Management, enabling unauthorized access to sensitive data, modification of system behavior, and potential disruption of operations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Oracle E-Business Suite Cost Management to version 12.2.16 or later, as this is the first supported version beyond the affected range (12.2.3–12.2.15).

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.