CVE-2026-101767

Summary

This vulnerability allows unauthenticated attackers to fully compromise the Oracle Application Object Library component in Oracle E-Business Suite, affecting versions 12.2.3 through 12.2.15. The flaw enables attackers to gain complete control over the affected system with high impact on confidentiality, integrity, and availability.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing attackers to compromise the system via simple HTTP network access.

Blast radius

If exploited, this vulnerability could lead to complete takeover of Oracle E-Business Suite installations, potentially affecting critical business applications and data across enterprise environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite 12.2.x immediately, as this CVE is specifically addressed in the Oracle CPU release containing fixes for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.