VDB

CVE-2026-101767

CVE-2026-101767 PUBLISHED CVSS 8.600000381469727 HIGH

As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products: Helidon JD Edwards EnterpriseOne Configurator JD Edwards EnterpriseOne General Ledger JD Edwards EnterpriseOne Homebuilder JD Edwards EnterpriseOne Human Resources Management JD Edwards EnterpriseOne Localizations JD Edwards EnterpriseOne Operational Sourcing JD Edwards EnterpriseOne Orchestrator JD Edwards EnterpriseOne Sales Order Entry JD Edwards EnterpriseOne Tools MySQL Client MySQL Cluster MySQL Connectors MySQL Enterprise Backup MySQL Router MySQL Server MySQL Server, MySQL Cluster Oracle APEX Oracle Access Manager Oracle Agile Engineering Data Management Oracle Agile PLM Oracle Agile PLM MCAD Connector Oracle Agile Product Lifecycle Management for Process Oracle Application Testing Suite Oracle Autonomous Health Framework Oracle BI Publisher Oracle Business Intelligence Enterprise Edition Oracle Business Process Management Suite Oracle Coherence Oracle Commerce Platform Oracle Communications BRM - Elastic Charging Engine Oracle Communications Billing and Revenue Management Oracle Communications Cloud Native Core Binding Support Function Oracle Communications Cloud Native Core Certificate Management Oracle Communications Cloud Native Core Console Oracle Communications Cloud Native Core Network Repository Function Oracle Communications Cloud Native Core Network Slice Selection Function Oracle Communications Cloud Native Core Policy Oracle Communications Cloud Native Core Security Edge Protection Proxy Oracle Communications Cloud Native Core Service Communication Proxy Oracle Communications Cloud Native Core Unified Data Repository Oracle Communications EAGLE Element Management System Oracle Communications EAGLE LNP Application Processor Oracle Communications LSMS Oracle Communications Network Analytics Data Director Oracle Communications Operations Monitor Oracle Communications Policy Management Oracle Communications Service Catalog and Design Oracle Communications Unified Assurance Oracle Communications Unified Inventory Management Oracle Data Integrator Oracle Database Server Oracle Demand Planning Oracle E-Business Suite Oracle Enterprise Manager Base Platform Oracle Enterprise Manager for Oracle Database Oracle Enterprise Manager for Siebel Oracle Enterprise Manager for Virtualization Oracle Essbase Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Oracle Fusion Middleware Oracle Fusion Middleware Control Oracle Global Lifecycle Management NextGen OUI Framework Oracle Global Lifecycle Management OPatch Oracle Global Lifecycle Management OPatchAuto Oracle GoldenGate Oracle GoldenGate Big Data and Application Adapters Oracle GoldenGate Stream Analytics Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Oracle HTTP Server Oracle Health Sciences Information Manager Oracle Healthcare Data Repository Oracle Healthcare Master Person Index Oracle Hospitality Cruise Shipboard Property Management (SPMS) Oracle Hospitality OPERA 5 Property Services Oracle Identity Manager Oracle Identity Manager Connector Oracle JDeveloper Oracle Java SE Oracle JavaFX Oracle Managed File Transfer Oracle Management Pack for Oracle GoldenGate Oracle Middleware Common Libraries and Tools Oracle NoSQL Database Oracle Outside In Technology Oracle Product Lifecycle Analytics Oracle REST Data Services Oracle Retail Merchandise Financial Planning Oracle Retail Merchandising System Oracle Retail Predictive Application Server Oracle Retail Xstore Point of Service Oracle SOA Suite Oracle SQL Developer Oracle Secure Backup Oracle Service Bus Oracle Solaris Oracle TimesTen In-Memory Database Oracle Trusted Answer Search Oracle Utilities Network Management System Oracle VM VirtualBox Oracle Web Services Manager Oracle WebCenter Content Oracle WebCenter Portal Oracle WebCenter Sites Oracle WebLogic Server Oracle Weblogic Server Proxy Plug-in Oracle ZFS Storage Appliance Kit PeopleSoft Enterprise CC Common Application Objects PeopleSoft Enterprise FIN Cash Management PeopleSoft Enterprise FIN Common Objects Argentina PeopleSoft Enterprise FIN Common Objects Brazil PeopleSoft Enterprise FIN General Ledger Brazil PeopleSoft Enterprise FIN Inventory Brazil PeopleSoft Enterprise FIN Manufacturing Brazil PeopleSoft Enterprise FIN Product Configurator Brazil PeopleSoft Enterprise HCM Global Payroll Switzerland PeopleSoft Enterprise HCM Human Resources PeopleSoft Enterprise PeopleTools PeopleSoft Enterprise SCM Manufacturing PeopleSoft Enterprise SCM Purchasing PeopleSoft Enterprise SCM Strategic Sourcing Primavera Gateway Primavera Unifier Siebel Applications WebCenter Content: Imaging Update 1 Open source reporting indicates that CVE-2026-101767 is exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

EPSS 0.61% · 49.2th percentile

Risk Scores

CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.61%
49.2th percentile

Affected Products

VendorProductVersions
OracleOracle Identity Manager Connector
PeopleSoftPeopleSoft Enterprise FIN Inventory Brazil
OracleOracle Health Sciences Information Manager
OracleOracle Business Process Management Suite
OracleOracle WebCenter Content
MySQLMySQL Enterprise Backup
OracleOracle Fusion Middleware
OracleOracle Communications EAGLE Element Management System
OracleOracle Communications BRM - Elastic Charging Engine
JDJD Edwards EnterpriseOne General Ledger
OracleOracle Agile PLM
OracleOracle Agile Engineering Data Management
OracleOracle Business Intelligence Enterprise Edition
SiebelSiebel Applications
OracleOracle Managed File Transfer
OracleOracle Hospitality Cruise Shipboard Property Management (SPMS)
OracleOracle Java SE
OracleOracle Hospitality OPERA 5 Property Services
OracleOracle Enterprise Manager for Oracle Database
OracleOracle GraalVM for JDK

…and 108 more

Timeline

  • Oct 20, 2026 CVE Published
  • Oct 21, 2026 EPSS Score
  • Oct 21, 2026 Coalition ESS Score
  • Oct 21, 2026 CVE Updated
  • Oct 22, 2026 EPSS Score
  • Oct 25, 2026 EPSS Score
  • Oct 27, 2026 VulnCheck KEV Exploitation
  • Oct 27, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›