Vulnerability in Oracle E-Business Suite Integrated SOA Gateway
CVE-2026-101687

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle E-business Suite Integrated Soa Gateway
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101687?

A vulnerability exists in Oracle E-Business Suite Integrated SOA Gateway, specifically impacting versions 12.2.3 through 12.2.15. This vulnerability allows a low-privileged attacker with network access via HTTP to exploit the system. If successfully attacked, the vulnerability could allow the attacker to compromise the Oracle E-Business Suite Integrated SOA Gateway, leading to potential unauthorized access and control. It is crucial for organizations using these versions to implement the necessary patches to mitigate risks associated with this security flaw.

Affected Version(s)

Oracle E-Business Suite Integrated SOA Gateway 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.