CVE-2026-61141
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in Oracle Advanced Benefits (component: Affordable Care Act) versions 12.2.7-12.2.15. Difficult to exploit, allows a low-privileged attacker via HTTP to compromise the system.
Risk Assessment
Risk of full takeover of Oracle Advanced Benefits, potentially leading to loss of confidentiality, integrity, and availability of benefits data.
Recommendation
Install the Oracle update for your version in the 12.2.7-12.2.15 range. Monitor access logs and restrict user privileges.
Other vulnerabilities in Oracle Advanced Benefits
See all- CVE-2026-62542Medium
A vulnerability in Oracle Advanced Benefits (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
- CVE-2026-61325High
Vulnerability in Oracle Advanced Benefits (part of Oracle E-Business Suite) version 12.2.15. An authenticated attacker with high privileges can access critical data and modify some data via HTTP.
- CVE-2026-61324High
Vulnerability in Oracle Advanced Benefits of Oracle E-Business Suite (component: Internal Operations). Affects version 12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Benefits, potentially impacting additional products (scope change). Successful attacks can lead to unauthorized creation, deletion, or modification of critical data. CVSS 7.7 (Integrity impacts).
Original NVD description (English source)
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Affordable Care Act). Supported versions that are affected are 12.2.7-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Benefits. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).