CVE WatchOct 21, 2026

CVE-2026-101694

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affe

CVSS

7.2

High

EPSS

0.5%

p44

KEV

—

Exploit Today

0-100

Published: Oct 20, 2026 · Last modified: Oct 21, 2026

EPSS · 30d

0.5%EPSS · 30 days0.5%

2026-10-212026-10-26

Technical description

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Official references

www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2026.html

Related CVEs

No related CVEs by CWE or product.