PULSE
FEED
← Todos os CVEs
CVE Watch21 de out. de 2026

CVE-2026-101688

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported

CVSS

8.6

Alta

EPSS

0.4%

p38

KEV

—

Exploit Today

12

0-100

Publicado: 20 de out. de 2026 · Última mod.: 21 de out. de 2026

EPSS · 30d
0.4%EPSS · 30 dias0.4%
2026-10-212026-11-07
Descrição técnica

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite Integrated SOA Gateway. While the vulnerability is in Oracle E-Business Suite Integrated SOA Gateway, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite Integrated SOA Gateway accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.