Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle EDI Gateway. Successful attacks of this vulnerability can result in takeover of Oracle EDI Gateway. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
Configurations
No configuration.
History
21 Oct 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 |
20 Oct 2026, 22:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-20 22:17
Updated : 2026-10-21 19:16
NVD link : CVE-2026-101466
Mitre link : CVE-2026-101466
CVE.ORG link : CVE-2026-101466
JSON object : View
Products Affected
No product.
CWE
CWE-269
Improper Privilege Management