Live › vulnerability › CVE-2026-101815
Go to dashboardA flaw in the Assets module of Oracle E-Business Suite's Internal Operations component lets a low-privileged user reach it over HTTP. An attacker can read and modify some Assets data and crash or hang the module.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Oracle E-Business Suite installations running Assets in the 12.2.3 through range are affected. Sites that do not run the Assets module, or run releases outside that range, are not in scope according to the sources.
12.2.15No product ranges from the sources yet.
12.2.3 through 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Assets. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Assets as well as unauthorized update, insert or delete access to some of Assets accessible data and unauthorized read access to a subset of Assets accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101815")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.