{"id":"CVE-2026-101517","kind":"vulnerability","aliases":["CVE-2026-101517"],"related":[],"title":"Oracle Utilities Network Management System: local low-privilege user reads critical data","description":"Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide).  Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.9 and  25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Utilities Network Management System executes to compromise Oracle Utilities Network Management System.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle Utilities Network Management System (System Wide component) has a flaw in several supported release lines, including 2.4.0.1.0 through 2.6.0.2.9 and 25.12.0.0.0 through 25.12.0.0.2. A low-privileged user who can log on to the host running the product can gain unauthorized access to critical data, per the CVSS 5.5 vector (confidentiality high, no integrity or availability impact).","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["network-management-system","on-prem","oracle-utilities","self-hosted","vendor"],"not_affected_if":["no-local-logon","unaffected-release"],"how_to_check":"- Identify the installed Oracle Utilities Network Management System release and compare it against the affected ranges listed in the advisory: 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.9, 25.12.0.0.0-25.12.0.0.2.\n- Check which OS accounts can log on to the hosts running the product, since the attack needs a local logon.","fix":"- Move Oracle Utilities Network Management System to a release outside the affected ranges, using the patch from Oracle's Critical Patch Update for the release line. Fix version: unknown from the sources.\n- Until patched, restrict local logon on the application hosts to trusted administrators.","status":"open","published_at":"2026-10-20T22:18:00+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-25T04:12:24+00:00","updated_at":"2026-10-25T04:12:24+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-25T04:12:24Z","model":"claude-haiku-5-5","output":{"fix":"- Move Oracle Utilities Network Management System to a release outside the affected ranges, using the patch from Oracle's Critical Patch Update for the release line. Fix version: unknown from the sources.\n- Until patched, restrict local logon on the application hosts to trusted administrators.","reach":"local","title":"Oracle Utilities Network Management System: local low-privilege user reads critical data","impact":"medium","summary":"Oracle Utilities Network Management System (System Wide component) has a flaw in several supported release lines, including 2.4.0.1.0 through 2.6.0.2.9 and 25.12.0.0.0 through 25.12.0.0.2. A low-privileged user who can log on to the host running the product can gain unauthorized access to critical data, per the CVSS 5.5 vector (confidentiality high, no integrity or availability impact).","category":"vendor","nicknames":[],"who_cares":["oracle-utilities","network-management-system","self-hosted","on-prem"],"confidence":0.6,"needs_auth":"yes","worst_case":"low-privileged local user reads critical data from the system","analyst_note":"Check Oracle's Critical Patch Update advisory for the fixed release and any official remediation steps for the affected lines.","how_to_check":"- Identify the installed Oracle Utilities Network Management System release and compare it against the affected ranges listed in the advisory: 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.9, 25.12.0.0.0-25.12.0.0.2.\n- Check which OS accounts can log on to the hosts running the product, since the attack needs a local logon.","needs_analyst":true,"not_affected_if":["unaffected-release","no-local-logon"],"who_is_affected":"Sites running Oracle Utilities Network Management System in one of the affected release lines are exposed. Because the attacker must already be able to log on to the infrastructure where the product runs, the risk sits with shared or multi-user hosts; a system where only a few administrators have shell access is less exposed. Sites on releases outside the listed ranges can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000773,"input_tokens":3599,"output_tokens":827,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101517':16A,19A '-2026':15A,18A '/av':189C '2.4.0.1.0':51B,114C '2.4.0.1.33':115C '2.5.0.1.0':116C '2.5.0.1.18':117C '2.5.0.2.0':118C '2.5.0.2.11':119C '2.6.0.1.0':120C '2.6.0.1.12':121C '2.6.0.2.0':122C '2.6.0.2.9':53B,123C '25.12.0.0.0':55B,125C '25.12.0.0.2':57B,126C '3.1':179C,188C '5.5':83B,182C 'access':76B,162C,168C,176C 'affect':112C 'allow':130C 'applic':104C 'attack':133C,154C 'avail':90B 'base':180C 'complet':167C 'compon':41B,105C 'compromis':147C 'confidenti':85B,183C 'critic':12A,78B,164C 'cve':14A,17A 'cvss':82B,178C,185C,187C 'data':13A,79B,165C,177C 'easili':127C 'execut':145C 'exploit':128C 'flaw':44B 'gain':74B 'h/i':195C 'high':86B 'host':32B,69B 'impact':91B,184C 'includ':50B 'infrastructur':138C 'integr':88B 'l/ac':190C 'l/pr':191C 'l/ui':192C 'line':49B 'local':6A 'log':65B 'logon':135C 'low':8A,60B,131C 'low-privileg':7A,59B 'manag':4A,22B,37B,98C,143C,151C,174C 'n':197C 'n/a':196C 'n/s':193C 'network':3A,21B,36B,97C,142C,150C,173C 'network-management-system':20B 'on-prem':24B 'oracl':1A,28B,34B,95C,102C,140C,148C,171C 'oracle-util':27B 'per':80B 'prem':26B 'privileg':9A,61B,132C 'product':72B,100C 'read':11A 'releas':48B 'result':159C 'run':70B 'score':181C 'self':31B 'self-host':30B 'sever':46B 'success':153C 'support':47B,108C 'system':5A,23B,38B,39B,99C,106C,144C,152C,175C 'u/c':194C 'unauthor':75B,161C 'user':10A,62B 'util':2A,29B,35B,96C,103C,141C,149C,172C 'vector':84B,186C 'vendor':33B 'version':109C 'vulner':92C,129C,157C 'wide':40B,107C","nicknames":[],"mitigations":[],"who_affected":"Sites running Oracle Utilities Network Management System in one of the affected release lines are exposed. Because the attacker must already be able to log on to the infrastructure where the product runs, the risk sits with shared or multi-user hosts; a system where only a few administrators have shell access is less exposed. Sites on releases outside the listed ranges can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101517","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101517","severity":null,"published_at":"2026-10-20T22:18:00+00:00","modified_at":"2026-10-21T14:29:49+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}