CVE-2026-61039

HighCVSS 7.2

Published: 21/07/2026(UTC)Updated: 17/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

Vulnerability in Oracle Advanced Supply Chain Planning from Oracle E-Business Suite (component: Core). Affected versions are 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.

Risk Assessment

Risk includes complete loss of confidentiality, integrity, and availability of the Oracle Advanced Supply Chain Planning system, potentially disrupting supply chain planning processes and exposing business data.

Recommendation

Immediately apply patches provided by Oracle for versions 12.2.3-12.2.15 and restrict network access to the system to trusted administrators only.

Other vulnerabilities in Oracle Advanced Supply Chain Planning

CVE-2016-5599Critical
Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite versions 12.2.3 through 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to MscObieeSrvlt.

Original NVD description (English source)

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Supply Chain Planning. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Supply Chain Planning. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).