CVE-2026-101701
MediumCVSS 6.0Summary
Vulnerability in Oracle Concurrent Processing (Request Submission and Scheduling component) versions 12.2.3-12.2.15. An easily exploitable attack by a high-privileged attacker with local logon may impact additional products (scope change) and lead to unauthorized access to critical data.
Risk Assessment
May result in unauthorized access to critical data in Oracle Concurrent Processing and potentially affect related systems. Requires high privileges and local access.
Recommendation
Apply Oracle updates for versions 12.2.3-12.2.15 and restrict local access to the infrastructure.
Other vulnerabilities in Oracle Concurrent Processing
See all- CVE-2026-101707High
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data.
- CVE-2026-101704High
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Affected versions are 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Oracle Concurrent Processing, with potential impact on additional products.
- CVE-2025-61882CriticalActively exploited
Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration) affects versions 12.2.3-12.2.14. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to full takeover of Oracle Concurrent Processing. CVSS score 9.8.
Original NVD description (English source)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS