CVE-2026-101540

Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity.

Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Capacity.

Vulnerability in the Oracle Capacity product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Oracle Capacity accessible data, with potential impact on additional products.

Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).

Vulnerability in Oracle Capacity (Oracle E-Business Suite), Internal Operations component, affecting versions 12.2.3-12.2.15. Easily exploitable by a low-privileged attacker with HTTP network access, allowing unauthorized access to critical data, modification of some data, and partial denial of service (partial DOS).

Vulnerability in Oracle Capacity (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data, and attacks may impact additional products (scope change).