Live › vulnerability › CVE-2026-101842
Go to dashboardThe Strategic Network Optimization component of Oracle E-Business Suite 12.2.3 through 12.2.15 has a flaw reachable over HTTP without a login. An attacker who tricks a user into one action can take over the SNO component.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product |
|---|
| Ecosystem |
|---|
| Affected |
|---|
| Fixed in |
|---|
| Oracle E-Business Suite Strategic Network Optimization | vendor | >= 12.2.3, <= 12.2.15 | Oct 2026 CPU patch 40022426:12.2.0 (per Rapid7, unconfirmed) |
12.2.3-12.2.15 environment (Oracle Applications Manager / AD patch history for the SNO product)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic Network Optimization. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Strategic Network Optimization. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101842")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.