CVE-2026-101707
HighCVSS 7.4Summary
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and gain complete access to data.
Risk Assessment
An unauthenticated attacker could modify or delete critical data and gain complete access to Oracle Concurrent Processing data, impacting integrity and confidentiality.
Recommendation
Apply the Oracle Critical Patch Update for Oracle E-Business Suite and restrict network access to the Concurrent Processing component.
Other vulnerabilities in Oracle Concurrent Processing
See all- CVE-2026-101704High
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Affected versions are 12.2.3-12.2.15. An easily exploitable flaw allows a high privileged attacker with logon to the infrastructure to take over Oracle Concurrent Processing, with potential impact on additional products.
- CVE-2026-101701Medium
Vulnerability in Oracle Concurrent Processing (Request Submission and Scheduling component) versions 12.2.3-12.2.15. An easily exploitable attack by a high-privileged attacker with local logon may impact additional products (scope change) and lead to unauthorized access to critical data.
- CVE-2025-61882CriticalActively exploited
Vulnerability in Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration) affects versions 12.2.3-12.2.14. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to full takeover of Oracle Concurrent Processing. CVSS score 9.8.
Original NVD description (English source)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Concurrent Processing accessible data as well as unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS