Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Oracle Corporation | Oracle Global Lifecycle Management NextGen OUI Framework | affected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
|
Tue, 20 Oct 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Global Lifecycle Management NextGen OUI Framework. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Global Lifecycle Management NextGen OUI Framework. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). | |
| First Time appeared |
Oracle
Oracle global Lifecycle Management Nextgen Oui Framework |
|
| CPEs | cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:14.1.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:14.1.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:15.1.1.0.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle global Lifecycle Management Nextgen Oui Framework |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-10-20T21:21:19.814Z
Reserved: 2026-09-28T15:40:09.489Z
Link: CVE-2026-101520
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-20T22:18:01.353
Modified: 2026-10-20T22:18:01.353
Link: CVE-2026-101520
Redhat
No data.
OpenCVE Enrichment
No data.
No weakness.