Live › vulnerability › CVE-2026-101672
Go to dashboardOracle Call Center Technology, part of Oracle E-Business Suite 12.2.3 through 12.2.15, has a flaw in its Internal Operations component reachable over RMI. A remote, unauthenticated attacker with network access could take over the Call Center component, with high impact to confidentiality, integrity and availability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle E-Business Suite 12.2.3 through 12.2.15 with the Call Center Technology component (Internal Operations) deployed and its RMI interface reachable over the network. Sites without Call Center Technology installed or with RMI blocked from untrusted networks are less exposed; the sources do not state more precise conditions.
No product ranges from the sources yet.
unknown version lookup command in the sourcesunknown12.2.3 to 12.2.15 range; exact patch name: unknownEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Call Center Technology. Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101672")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.