CVE-2026-61200

MediumCVSS 5.4

Published: 21/07/2026(UTC)Updated: 17/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

Vulnerability in Oracle Labor Distribution (Internal Operations component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.

Risk Assessment

Risk of compromising labor distribution data confidentiality and integrity, potentially leading to incorrect time accounting.

Recommendation

Apply Oracle E-Business Suite patches and monitor access to the labor distribution module.

Other vulnerabilities in Oracle Labor Distribution

CVE-2026-70782High
Vulnerability in Oracle Labor Distribution (component: Internal Operations) versions 12.2.3-12.2.15. A low-privileged attacker can modify and access critical data. Easily exploitable, CVSS 8.1.

Original NVD description (English source)

Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Labor Distribution accessible data as well as unauthorized read access to a subset of Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS