# E-Business Suite

Published articles for E-Business Suite.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

DevFeed: [Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)](<https://devfeed.tech/articles/exploitation-attempts-against-recently-patched-oracle-ebs-flaw-have-begun-cve-2026-101767-106269.md>)

Original publisher: [Read original article](<https://www.helpnetsecurity.com/2026/10/29/oracle-e-business-suite-cve-2026-101767-exploitation/>)

Author: Sinisa Markovic

Published: 2026-10-29T13:12:24Z

Content type: news

Language: en

Sources: [Help Net Security](<https://devfeed.tech/sources/help-net-security.md>)

Topics: [known exploitable vulnerabilities](<https://devfeed.tech/topics/known-exploitable-vulnerabilities.md>), [Hacking](<https://devfeed.tech/topics/hacking.md>), [cve remediation](<https://devfeed.tech/topics/cve-remediation.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [code-execution](<https://devfeed.tech/tags/code-execution.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2026-101767](<https://devfeed.tech/tags/cve-2026-101767.md>), [cvss-score](<https://devfeed.tech/tags/cvss-score.md>), [defused](<https://devfeed.tech/tags/defused.md>), [don-t-miss](<https://devfeed.tech/tags/don-t-miss.md>), [e-business-suite](<https://devfeed.tech/tags/e-business-suite.md>), [ebs](<https://devfeed.tech/tags/ebs.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [exploits](<https://devfeed.tech/tags/exploits.md>), [financial](<https://devfeed.tech/tags/financial.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [hot-stuff](<https://devfeed.tech/tags/hot-stuff.md>), [news](<https://devfeed.tech/tags/news.md>), [oracle](<https://devfeed.tech/tags/oracle.md>), [oracle-e-business-suite](<https://devfeed.tech/tags/oracle-e-business-suite.md>), [patched](<https://devfeed.tech/tags/patched.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [sql](<https://devfeed.tech/tags/sql.md>), [sql-injection](<https://devfeed.tech/tags/sql-injection.md>), [thin-client](<https://devfeed.tech/tags/thin-client.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Defused reported exploratory exploitation attempts on Oct. 27 against CVE-2026-101767, an unauthenticated SQL injection in Oracle E-Business Suite's Thin Client Framework servlet that can lead to remote code execution. The CVSS 9.8 flaw affects Application Object Library in EBS versions 12.2.3-12.2.15; a network-reachable attacker can run SQL as the APPS database user and potentially access application data or execute commands on the host. Oracle released a fix on Oct. 20, 2026. Censys counted 2,246 EBS web properties but could not determine which run affected versions or have applied the update; its count includes hostnames and ports separately. For unpatched systems, Horizon3.ai advises removing /OA_HTML/AppsTCFServer from the URL firewall allowlist and restricting the web tier to trusted networks. Censys recommends reviewing unpatched internet-facing instances for indicators of compromise.

### Source excerpt

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw. "Our Oracle E-Business Suite decoys recorded exploratory exploits against CVE-2026-101767, an unauthenticated SQL injection in EBS's Thin Client Framework servlet that chains to remote code execution, this morning, Oct 27," Defused posted on X, noting that no public report of the flaw being attempted in the wild had existed before. About CVE-2026-101767 The flaw carries a CVSS score of 9.8 and ... More -> The post Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) appeared first on Help Net Security.

## Hackers now scanning systems for recently-patched Oracle flaw

DevFeed: [Hackers now scanning systems for recently-patched Oracle flaw](<https://devfeed.tech/articles/hackers-now-scanning-systems-for-recently-patched-oracle-flaw-104468.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/hackers-now-scanning-systems-for-recently-patched-oracle-flaw/>)

Author: Sergiu Gatlan

Published: 2026-10-28T12:19:57Z

Content type: news

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [Internet](<https://devfeed.tech/topics/internet.md>), [HTTP](<https://devfeed.tech/topics/http.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [actively-exploited](<https://devfeed.tech/tags/actively-exploited.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [cve-2026-101767](<https://devfeed.tech/tags/cve-2026-101767.md>), [defused](<https://devfeed.tech/tags/defused.md>), [e-business-suite](<https://devfeed.tech/tags/e-business-suite.md>), [ebs](<https://devfeed.tech/tags/ebs.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [exploits](<https://devfeed.tech/tags/exploits.md>), [exposed](<https://devfeed.tech/tags/exposed.md>), [hackers](<https://devfeed.tech/tags/hackers.md>), [healthcare](<https://devfeed.tech/tags/healthcare.md>), [http](<https://devfeed.tech/tags/http.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [infosec-computer-security](<https://devfeed.tech/tags/infosec-computer-security.md>), [intelligence](<https://devfeed.tech/tags/intelligence.md>), [internet](<https://devfeed.tech/tags/internet.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [oracle](<https://devfeed.tech/tags/oracle.md>), [oracle-e-business-suite](<https://devfeed.tech/tags/oracle-e-business-suite.md>), [patched](<https://devfeed.tech/tags/patched.md>), [scanning](<https://devfeed.tech/tags/scanning.md>), [security](<https://devfeed.tech/tags/security.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

Attackers were scanning the Internet for systems vulnerable to CVE-2026-101767, a critical Oracle E-Business Suite flaw. Oracle says the issue can enable unauthenticated takeover over HTTP and released patches on October 20, 2026, urging customers to apply them and use actively supported versions. Defused reported exploratory exploit activity against decoys on October 27, describing an SQL injection that chains to remote code execution. Shadowserver tracks more than 670 Internet-exposed EBS instances, but its count does not show how many are honeypots or already secured. Oracle had not tagged this flaw as exploited in the wild at the time of the excerpt.

### Source excerpt

Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]