{"schema":"threatline.record/2","record":{"id":"CVE-2026-101672","aliases":[],"summary":"Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v","details":"Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Call Center Technology.  Successful attacks of this vulnerability can result in takeover of Oracle Call Center Technology. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","categories":["Unclassified"],"product":"Oracle Call Center Technology","vendor":"Oracle Corporation","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-101672","source_modified_at":"2026-10-21T21:07:50.147Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Oracle Call Center Technology","vendor":"Oracle Corporation","versions":[{"version":"12.2.3","status":"affected","lessThanOrEqual":"12.2.15","versionType":"custom"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00373,"percentile":0.30098,"score_date":"2026-10-23"},"published_at":"2026-10-20T21:22:13.792Z","modified_at":"2026-10-21T21:07:50.147Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-101672","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-21T21:07:50.147Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101672","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-21T19:06:53.897795Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-21T21:07:50.147Z","content_hash":"498cc5b7f14db590886589eca707e283bc78f4f5aa4822750bf1dea1f52b48c7"}}