Live › vulnerability › CVE-2026-101847
Go to dashboardOracle Bills of Material, part of Oracle E-Business Suite, has a flaw in its Internal Operations component that lets a low-privileged attacker reach it over HTTP and take it over. Per the description, a successful attack gives full control over confidentiality, integrity and availability for that module.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle E-Business Suite Bills of Material in the affected to range, where the module is reachable over HTTP by low-privileged users. The sources do not say which deployment or configuration choices make an instance exposed, so the exact exposure is unknown.
12.2.312.2.15No product ranges from the sources yet.
12.2.3 through 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in takeover of Oracle Bills of Material. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101847")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.