CVE-2026-61025
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Vulnerability in Oracle iRecruitment from Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
Risk Assessment
Risk includes complete loss of confidentiality, integrity, and availability of the Oracle iRecruitment system, potentially compromising recruitment data and hiring processes.
Recommendation
Immediately apply patches provided by Oracle for versions 12.2.3-12.2.15 and restrict network access to the system to trusted administrators only.
Other vulnerabilities in Oracle iRecruitment
See all- CVE-2026-70835High
Vulnerability in Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker can gain full access to data, including critical data, and modify it via HTTP.
- CVE-2026-61026High
In Oracle iRecruitment (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Internal Operations component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Original NVD description (English source)
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in takeover of Oracle iRecruitment. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).