VDB
GCVE-110-NCSC-2026-442
GCVE-110-NCSC-2026-442
Advisory PublishedCVSS 8.8/10
A vulnerability in Oracle Contract Lifecycle Management for Public Sector (versions 12.2.3-12.2.15) allows low-privileged attackers with HTTP network access to create, delete, or modify critical data, with a CVSS 3.1 score of 8.1.
Weaknesses (CWE)
CWE-306Missing Authentication for Critical Function
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Oracle | vers:unknown/* | — | — |
Aliases
CVE-2026-101534CVE-2026-101542CVE-2026-101557CVE-2026-101567CVE-2026-101634CVE-2026-101635CVE-2026-101640CVE-2026-101648CVE-2026-101653CVE-2026-101654CVE-2026-101655CVE-2026-101656CVE-2026-101664CVE-2026-101665CVE-2026-101672CVE-2026-101684CVE-2026-101685CVE-2026-101686CVE-2026-101688CVE-2026-101690CVE-2026-101692CVE-2026-101700CVE-2026-101704CVE-2026-101742CVE-2026-101767CVE-2026-101808CVE-2026-101809CVE-2026-101813CVE-2026-101824CVE-2026-101831CVE-2026-101834CVE-2026-101841CVE-2026-101842CVE-2026-101852CVE-2026-101853CVE-2026-101854CVE-2026-83361CVE-2026-83363CVE-2026-83393CVE-2026-87408CVE-2026-91347CVE-2026-91506CVE-2026-91532
References
Browse GCVE Records
858 records in the GCVE database · Updated October 29, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.