CVE-2026-61095
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Vulnerability in Oracle Communications Unified Inventory Management (component: Security). Affects versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes of some data. CVSS 7.1 (Confidentiality and Integrity impacts).
Risk Assessment
Risk of critical data leakage and unauthorized data modification in Oracle Communications Unified Inventory Management.
Recommendation
Apply the Oracle patch and restrict network access to vulnerable versions.
Other vulnerabilities in Oracle Communications Unified Inventory Management
See all- CVE-2026-71143High
Vulnerability in Oracle Communications Unified Inventory Management product (component: Third Party) in versions 7.5.0, 7.5.1, 7.6.0-7.8.0 and 8.0.1. Difficult to exploit by unauthenticated attacker via HTTP. Successful attacks can result in unauthorized creation, deletion or modification access to critical data and unauthorized access to critical data. CVSS 7.4.
- CVE-2026-71142High
Vulnerability in Oracle Communications Unified Inventory Management product (component: Security Component) in versions 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable by unauthenticated attacker via HTTP. Successful attacks can result in unauthorized access to critical data or complete access to all system accessible data. CVSS 7.5.
Original NVD description (English source)
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Unified Inventory Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Unified Inventory Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Communications Unified Inventory Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).