70/100
CVE-2026-101767 affects Oracle Application Object Library in Oracle E-Business Suite supported versions 12.2.3-12.2.15 and allows unauthenticated compromise over HTTP; reporting describes SQL injection leading to remote code execution. Attackers are probing for unpatched systems, but the supplied reports do not establish successful exploitation. Apply Oracle's recent update and confirm the applicable fixed release in its advisory.