CVE-2026-101704
HighCVSS 8.2Summary
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Affected versions are 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Oracle Concurrent Processing, with potential impact on additional products.
Risk Assessment
A high privileged attacker with local access could take over Oracle Concurrent Processing, resulting in full compromise of confidentiality, integrity and availability and affecting additional products.
Recommendation
Apply the Oracle Critical Patch Update for Oracle E-Business Suite and restrict local access to the infrastructure hosting Concurrent Processing.
Other vulnerabilities in Oracle Concurrent Processing
See all- CVE-2026-101707High
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data.
- CVE-2026-101701Medium
Vulnerability in Oracle Concurrent Processing (Request Submission and Scheduling component) versions 12.2.3-12.2.15. An easily exploitable attack by a high-privileged attacker with local logon may impact additional products (scope change) and lead to unauthorized access to critical data.
- CVE-2025-61882CriticalActively exploited
Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration) affects versions 12.2.3-12.2.14. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to full takeover of Oracle Concurrent Processing. CVSS score 9.8.
Original NVD description (English source)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS