CVE-2026-101701

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Oracle Concurrent Processing

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: Oracle

Description

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Concurrent Processing executes to compromise Oracle Concurrent Processing. While the vulnerability is in Oracle Concurrent Processing, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101701

EUVD

EUVD-2026-106103

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	Oracle Concurrent Processing	12.2.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Concurrent Processing within Oracle E-Business Suite. It affects versions 12.2.3 to 12.2.15. A high-privileged attacker with local access can exploit it to compromise Oracle Concurrent Processing, potentially leading to unauthorized access to critical data or full access to all data accessible by Oracle Concurrent Processing.

Detection Guidance

Detection requires checking for unauthorized access or suspicious activity in Oracle Concurrent Processing. Review logs for unusual request submissions or scheduling changes. Check for high-privileged logins to the infrastructure hosting Oracle Concurrent Processing. Monitor for unauthorized data access or modifications in affected components.

Impact Analysis

If you are an administrator or user with high privileges in an Oracle E-Business Suite environment using affected versions, an attacker could gain unauthorized access to sensitive data or take control of Oracle Concurrent Processing. This could lead to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may result in non-compliance with regulations like GDPR or HIPAA. Unauthorized data exposure can lead to legal penalties, fines, or reputational damage due to failure to protect personal or health information.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite to address the vulnerability in Concurrent Processing. Ensure only trusted users with minimal required privileges have access to the infrastructure where Oracle Concurrent Processing executes.

Hi! I’m here to help you understand CVE-2026-101701. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...