Skip to content
Heist/ feed
High

CVE-2026-101699

Type: advisorySource: Official CVE List1 source record

Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in takeover of Oracle One-to-One Fulfillment. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Announced Source revision 1
Original source ↗

CVE-2026-101699

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-101699

Oracle One-to-One Fulfillment

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Oracle Corporation",
    "product": "Oracle One-to-One Fulfillment",
    "versions": [
      {
        "status": "affected",
        "version": "12.2.3",
        "versionType": "custom",
        "lessThanOrEqual": "12.2.15"
      }
    ]
  }
]
Related CVEs
CVE-2026-101699

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#50317 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement