PT-2026-34099 · Oracle · Advanced Inbound Telephony+1
CVE-2026-34275
·
Published
2026-04-21
·
Updated
2026-04-27
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Oracle Advanced Inbound Telephony versions 12.2.3 through 12.2.15
Description
An issue in the Setup and Administration component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in a complete takeover of the Oracle Advanced Inbound Telephony component.
Recommendations
Update versions 12.2.3 through 12.2.15 to a patched version.
Fix
RCE
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Advanced Inbound Telephony
E-Business Suite