Live › vulnerability › CVE-2026-101703
Go to dashboardA flaw in the Pasta product of Oracle E-Business Suite's Internal Operations component lets a low-privileged user reach the product over HTTP and take it over. The sources say a successful attack gives full takeover, with confidentiality, integrity and availability all affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle E-Business Suite 12.2.3 through 12.2.15 with the Pasta product in the Internal Operations component. The sources do not describe further configuration conditions, so exposure beyond the affected version range is unknown.
No product ranges from the sources yet.
12.2.3 through 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101703")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.