Oracle
This is rated critical severity (9.8 out of 10). There is no confirmed exploitation of it yet. Ask IT whether the affected products are in your estate.
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in takeover of Oracle Application Object Library. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Impact
Longer bar: more harm
1 link from the CVE record, grouped by site.
oracle.com1 link
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
