CVE-2026-101703

HighCVSS 7.5

Published: 20/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Pasta.

Risk Assessment

Potential takeover of the Pasta product by a low privileged attacker, resulting in full compromise of confidentiality, integrity and availability.

Recommendation

Apply the Oracle Critical Patch Update for Oracle E-Business Suite and restrict network access to the Pasta product.

Other vulnerabilities in Pasta

CVE-2026-87404High
Vulnerability in Pasta (Printing Engine component) within Oracle E-Business Suite affecting versions 12.2.3-12.2.15. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Pasta.

Original NVD description (English source)

Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Pasta. Successful attacks of this vulnerability can result in takeover of Pasta. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS