Live › vulnerability › CVE-2026-101704
Go to dashboardOracle Concurrent Processing, a component of Oracle E-Business Suite versions 12.2.3 through 12.2.15, has a flaw that lets a high-privileged local user compromise the product. Per the CVSS vector, a successful attack can also affect other products on the same infrastructure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle E-Business Suite release 12.2.3 through 12.2.15 with Concurrent Processing on the server. Exploitation needs a high-privileged account with logon access to the host where Concurrent Processing runs, so exposure is mainly from insiders or already-compromised admin accounts. Teams not running E-Business Suite in this version range can skip it.
No product ranges from the sources yet.
12.2.3 and 12.2.15, using the Oracle release information for your environmentEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101704")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.