Live › vulnerability › CVE-2026-101767
Go to dashboardUnauthenticated SQL injection in the Thin Client Framework servlet (/OA_HTML/AppsTCFServer) of Oracle E-Business Suite Application Object Library (Core), 12.2.3-12.2.15. It runs SQL as the APPS database user and chains to OS command execution as the EBS application account. CVSS 9.8. Reported by Horizon3.ai; fixed in the October 2026 CPU.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| Oracle E-Business Suite Application Object Library | vendor | >= 12.2.3, <= 12.2.15 | Oct 2026 CPU (Patch 40022426:12.2.0, per Rapid7) |
12.2.3-12.2.15 and whether the Oct 2026 CPU patch for AOL is applied (see MOS Note KA923)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
@Horizon3Attack13k followers · X175 likes · 47 reposts2026-10-20 00:00“We discovered CVE-2026-101767, an unauthenticated SQL injection in #Oracle E-Business Suite that chains to remote code execution. Fixed in Oracle's October CPU. Technical details to come later. Indicators of Compromise: Unauthenticated POST requests to /OA_HTML/AppsTCFServer”
View on X
Posts are quoted with a link to the original. They are data to us, never instructions.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101767")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.