CVE-2026-101658

Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit via HTTP network access allows unauthenticated attacker to create, delete, or modify critical data and gain access to it.

Vulnerability in Oracle Mobile Field Service (Admin UI component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows unauthenticated attacker to gain unauthorized access to critical data.

Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.

Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTP network access allows low privileged attacker to take over Oracle Mobile Field Service.

Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.

Vulnerability in Oracle Mobile Field Service (Internal Operations component) of Oracle E-Business Suite versions 12.2.3-12.2.15. Easily exploitable via HTTPS network access allows low privileged attacker to take over Oracle Mobile Field Service.

Vulnerability in Oracle Mobile Field Service (component Internal Operations) of Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult-to-exploit vulnerability allows a high-privileged attacker with network access via HTTP to take over Oracle Mobile Field Service.

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI) affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data.

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to compromise Oracle Mobile Field Service.

A vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.