{"id":"CVE-2026-101681","revision":"cc11539ee34040548bae70ebd43700de","records":[{"revision":"cc11539ee34040548bae70ebd43700de","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-101681","aliases":[],"title":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to th…","description":"Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise Applications DBA.  Successful attacks of this vulnerability can result in takeover of Applications DBA. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).","state":0,"publishedAt":"2026-10-20T21:22:17.124+00:00","modifiedAt":"2026-10-21T21:06:27.411+00:00","affected":[{"ecosystem":"Vendor product","name":"Applications DBA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Oracle Corporation\",\n                    \"product\": \"Applications DBA\",\n                    \"versions\": [\n                        {\n                            \"version\": \"12.2.3\",\n                            \"status\": \"affected\",\n                            \"lessThanOrEqual\": \"12.2.15\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7,"severity":"HIGH"}],"references":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-101681","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-101681","identifiers":["CVE-2026-101681"]},"retained":false,"historicalAffected":[]}],"coverage":[]}