Live › vulnerability › CVE-2026-101660
Go to dashboardOracle Mobile Field Service, part of Oracle E-Business Suite, has a flaw in its Admin UI that lets an unauthenticated attacker reach it over HTTP. A successful attack gives read access to critical data held by the service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite with Oracle Mobile Field Service on releases through are affected. Exposure is highest where the Admin UI is reachable over HTTP from untrusted networks. Organisations without Mobile Field Service deployed can skip it.
12.2.312.2.15No product ranges from the sources yet.
12.2.x.12.2.3 through 12.2.15.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Mobile Field Service accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101660")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.