Unauthorized Data Access Vulnerability in Oracle E-Business Suite
CVE-2026-101696

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Object Library
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101696?

There is a vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite that could potentially allow an unauthenticated attacker with network access to compromise the application. This vulnerability necessitates some level of human interaction from a third-party individual, which complicates exploitation. If successfully exploited, it may allow the attacker unauthorized creation, deletion, or modification of sensitive data within the accessible data of the Oracle Application Object Library.

Affected Version(s)

Oracle Application Object Library 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.