Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-101500

Quick assessment

Affected

Oracle Corporation Oracle Global Lifecycle Management OPatchAuto

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle Global Lifecycle Management 产品中的 OPatchAuto 组件（属于数据库扩展部分）存在安全漏洞。受影响的受支持版本为 12.2.0.1.16 至 12.2.0.1.52。该漏洞易于被利用，允许拥有高权限且已登录至 Oracle Global Lifecycle Management OPatchAuto 运行所在基础设施的攻击者，对 OPatchAuto 实施攻击。成功利用此漏洞需要除攻击者以外的其他人员进行交互操作。一旦攻击成功，可能导致攻击者完全接管 Oracle

CVSS 6.5 · Medium EPSS 0.15% · P4 Updated Oct 23, 2026

Possible ATT&CK Techniques 2 AI

T1210.001 T1055.012 · Process Hollowing

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Oracle Corporation	Oracle Global Lifecycle Management OPatchAuto	`12.2.0.1.16≤ 12.2.0.1.52`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Global Lifecycle Management OPatchAuto executes to compromise Oracle Global Lifecycle Management OPatchAuto. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management OPatchAuto. CVSS 3.1 Base Score 6.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H).

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Oracle Corporation	Oracle Global Lifecycle Management OPatchAuto	12.2.0.1.16 ~ 12.2.0.1.52	-

II. Public POCs for CVE-2026-101500

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-101500

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-101500 (1)

🔗 Oracle Critical Patch Update Advisory - October 2026 Read full article vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-101500

Same Patch Batch · Oracle Corporation · 2026-10-20 · 1076 CVEs total

CVE-2026-91231	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-91221	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-91216	10.0 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞
CVE-2026-87337	10.0 CRITICAL	Oracle Access Manager 12.2.1.4.0/14.1.2.1.0 远程代码执行
CVE-2026-91299	10.0 CRITICAL	Oracle JD Edwards 9.2.0-9.2.26.5远程代码执行漏洞
CVE-2026-101809	10.0 CRITICAL	Oracle EBS 12.2.3-15 Workflow 远程接管漏洞
CVE-2026-91354	9.9 CRITICAL	Oracle Outside In 8.5.8远程代码执行漏洞
CVE-2026-91250	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-91251	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-91232	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0 和 14.1.2.0.0 远程代码执行漏洞
CVE-2026-91224	9.9 CRITICAL	Oracle SOA Suite 12.2.1.4.0/14.1.2.0.0 远程接管漏洞
CVE-2026-91222	9.9 CRITICAL	Oracle BPM Suite 12.2.1.4.0/14.1.2.0.0 SOAP 远程接管漏洞
CVE-2026-91637	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程接管漏洞
CVE-2026-91638	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程接管漏洞
CVE-2026-101501	9.9 CRITICAL	Oracle Trusted Answer Search 26.1 PL/SQL远程代码执行漏洞
CVE-2026-91663	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程代码执行漏洞
CVE-2026-101503	9.9 CRITICAL	Oracle Trusted Answer Search 26.1 远程代码执行漏洞
CVE-2026-91658	9.9 CRITICAL	Oracle Essbase 21.8.3.0.0 远程代码执行漏洞
CVE-2026-101528	9.9 CRITICAL	Oracle Enterprise Manager 13.5/24.1 远程代码执行漏洞
CVE-2026-101446	9.9 CRITICAL	Oracle Siebel CRM 17.0-26.9 远程接管漏洞

Showing top 20 of 1076 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: Oracle Corporation