CVE-2026-101635
HighCVSS 8.8Summary
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.
Risk Assessment
Successful exploitation can result in takeover of Oracle Mobile Field Service, impacting confidentiality, integrity, and availability. It requires low privileges but is easily exploitable.
Recommendation
Apply the available Oracle security updates for versions 12.2.3-12.2.15. Restrict network access to Oracle Mobile Field Service and monitor for suspicious activity.
Other vulnerabilities in Oracle Mobile Field Service
See all- CVE-2026-101661High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
- CVE-2026-101660High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows unauthenticated attacker to gain unauthorized access to critical data.
- CVE-2026-101658High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
- CVE-2026-101656High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101655High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101654High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101653High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101644Medium
Vulnerability in Oracle Mobile Field Service (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to take over Oracle Mobile Field Service.
- CVE-2026-101636High
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data.
- CVE-2017-10413High
A vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Original NVD description (English source)
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS