Live › vulnerability › CVE-2026-101681
Go to dashboardOracle E-Business Suite's Applications DBA component, in the AD Utilities area, has a flaw that lets a low-privileged user who can log on to the host take over the product. The sources say a successful attack can give full confidentiality, integrity and availability impact on Applications DBA.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle E-Business Suite 12.2.3 through 12.2.15 where Applications DBA runs on a host that low-privileged users can log on to. The attack is rated difficult, so exposure depends on who holds logons on that infrastructure. Teams on other releases or without that host access can likely skip it.
No product ranges from the sources yet.
12.2.x in that range.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA. Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101681")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.