CoreCVE
Back

HIGH

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations)

Published Jul 21, 2026

Description

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Internal Operations). The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. While the vulnerability is in Oracle Advanced Benefits, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Advanced Benefits accessible data as well as unauthorized update, insert or delete access to some of Oracle Advanced Benefits accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-284

CWE-863

Incorrect Authorization

References (1)

Change history (3)
  1. CISA ADP
    • SSVC technical impact changed from total to partial
  2. CISA ADP
    • SSVC technical impact changed from partial to total
  3. CISA ADP
    • SSVC technical impact changed from total to partial
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Jul 21, 2026
Updated Jul 28, 2026
Reserved Jul 8, 2026
Link CVE-2026-61325
CISA Vulnrichment
Updated Jul 22, 2026
NVD
Status Analyzed
Modified Aug 6, 2026
Link CVE-2026-61325
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-61325