Live › vulnerability › CVE-2026-101825
Go to dashboardOracle HCM Common Architecture in E-Business Suite 12.2.3 through 12.2.15 has a flaw in its Internal Operations component. A low-privileged user with network access over HTTP can, with difficulty, take over the product, per the CVSS 3.1 vector.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sources describe Oracle E-Business Suite HCM Common Architecture, Internal Operations, supported versions 12.2.3 through 12.2.15. Exposure needs a low-privileged account reachable over HTTP, and the sources do not say which configurations are affected beyond that. Teams running other Oracle EBS releases can likely skip it, but the sources do not confirm this.
No product ranges from the sources yet.
12.2.3 through 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101825")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.