5.3

CVE-2026-101605: oracle corporation oracle utilities network management system

CVSS: 5.3v3.1MediumReceived
Published 20-10-2026Last modified 20-10-2026
Open JSON

Vulnerability summary

CVE-2026-101605 is a medium (CVSS 5.3) vulnerability in oracle corporation oracle utilities network management system.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 20-10-2026
    PublishedVulnerability first disclosed.

Description

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.18, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.10 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Utilities Network Management System. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Oracle corporation1 product
  • oracle utilities network management system≥ 2.4.0.1.0, ≤ 2.4.0.1.33 | ≥ 2.5.0.1.0, ≤ 2.5.0.1.18 | ≥ 2.5.0.2.0, ≤ 2.5.0.2.11 | ≥ 2.6.0.1.0, ≤ 2.6.0.1.12 | ≥ 2.6.0.2.0, ≤ 2.6.0.2.10 | ≥ 25.12.0.0.0, ≤ 25.12.0.0.2

1 vendor · 1 product

References

1 links