CVE-2026-101654
HighCVSS 8.8Summary
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
Risk Assessment
May lead to full takeover of Oracle Mobile Field Service, impacting confidentiality, integrity, and availability. Requires low privileged authentication.
Recommendation
Apply available security updates from Oracle for Oracle E-Business Suite. Follow the principle of least privilege for user accounts.
Other vulnerabilities in Oracle Mobile Field Service
See all- CVE-2026-101661High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
- CVE-2026-101660High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows unauthenticated attacker to gain unauthorized access to critical data.
- CVE-2026-101658High
Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.
- CVE-2026-101656High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101655High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101653High
Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.
- CVE-2026-101644Medium
Vulnerability in Oracle Mobile Field Service (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to take over Oracle Mobile Field Service.
- CVE-2026-101636High
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data.
- CVE-2026-101635High
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.
- CVE-2017-10413High
A vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
Original NVD description (English source)
Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Mobile Field Service. Successful attacks of this vulnerability can result in takeover of Oracle Mobile Field Service. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS